Ribbon Communications Breach Marks Latest Telecom Attack

Ribbon Communications disclosed in its quarterly filing that its network was breached and that cyberattackers had lurked in its environment for almost a year, with initial access possibly occurring as far back as December 2024. The company said it first detected the intrusion in early September and began its incident response with help from third-party cybersecurity firms and federal law enforcement.

In its 10-Q, Ribbon said there is ongoing investigation and that, as of the report date, there is no evidence the threat actor accessed or exfiltrated material information, although several customer files saved outside the main network on two laptops appear to have been accessed and those customers were notified. The attackers were reportedly associated with a nation-state actor, according to the 10-Q filing, though it remains unclear which party made that association.

Ribbon added that it believes attacker access has been cut off and that the breach has not had a material impact on the company, with further updates to be provided if warranted.