ShinyHunters provided no real proof they hacked ReliaQuest– because they didn’t get anywhere: ReliaQuest (2)

Databreaches •Dissent • August 23, 2026

UPDATE: Yesterday, DataBreaches reported that ShinyHunters had added ReliaQuest to its dedicated leak site, but without any substantive proof — only a few screenshots showing access to a user account on reliaquest.okta[.]com/enduser/settings. ReliaQuest did not to DataBreaches’ email inquiry, but they have published an entire blog post responding to the claims. Without naming ShinyHunters,... Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Failed Social Engineering Attack on ReliaQuest by ShinyHunters On August 22, 2026, cybersecurity firm ReliaQuest experienced a social engineering attack where hackers impersonated security team members to trick an employee into accessing a fake single sign-on (SSO) page. The attackers used a lookalike domain, reliaquest.claims, and successfully obtained temporary, view-only access to the employee's identity dashboard after the employee entered their credentials and approved an MFA push notification. However, ReliaQuest's device-trust controls prevented further access to applications and systems. The company confirmed that no customer data was compromised and that the attacker's session was terminated promptly. ShinyHunters later claimed responsibility for the attack, but ReliaQuest disputed the extent of the breach, stating that no systems or sensitive data were accessed. The incident highlights the ongoing threat posed by social engineering tactics in the cybersecurity landscape. 14 sources 42

Extracted Entities

ShinyHunters provided no real proof they hacked ReliaQuest– because they didn’t get anywhere: ReliaQuest (2)

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Domains (1)

MITRE ATT&CK (1)