Hackers Impersonate ReliaQuest Security Team Member to Steal SSO Credentials and MFA Access

Cybersecuritynews •Abinaya • August 24, 2026

ReliaQuest has disclosed a social engineering attack in which threat actors impersonated members of its security team to lure employees to a fraudulent single sign-on page. The incident briefly exposed one employee identity, but ReliaQuest said its layered controls prevented access to internal applications, customer data, and business systems. The attack occurred on August 22, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Social Engineering Attack Targets ReliaQuest Employees On August 22, 2026, ReliaQuest reported a social engineering attack where hackers impersonated security staff to obtain credentials. The attackers used a spoofed domain to trick an employee into approving a malicious multi-factor authentication (MFA) request. This incident temporarily exposed a single identity session with view-only access to ReliaQuest's systems. However, the company's layered security controls prevented unauthorized access to internal applications and sensitive data. The attack highlights the risks associated with social engineering tactics in corporate environments. ReliaQuest is currently investigating the incident and has implemented additional security measures to mitigate future risks. 2 sources 51

Extracted Entities

Hackers Impersonate ReliaQuest Security Team Member to Steal SSO Credentials and MFA Access

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)