Major telecom services provider Ribbon breached by state hackers

Ribbon Communications disclosed that nation-state actors breached its IT network — initial access may date to December 2024 and the intrusion was detected in September 2025. The attackers accessed customer files stored on two laptops outside the main network; Ribbon is working with third-party responders and federal law enforcement, has not yet found evidence of material information theft, and noted similarities to previous telecom compromises attributed to the China-linked Salt Typhoon group.