Back Feeds2.Feedburner

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack

Feeds2.Feedburner •Sinisa Markovic • August 25, 2026

Cybersecurity company ReliaQuest has confirmed that one of its own employees fell for a social engineering attack, handing attackers a password and a brief window into the company’s identity system. The admission came after the extortion group ShinyHunters posted screenshots on its leak site, claiming a bigger win. The incident was preceded by an unusual exchange on X several days earlier. Last week, on August 17, ReliaQuest Threat Research posted on X a wider … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Failed Social Engineering Attack on ReliaQuest by ShinyHunters On August 22, 2026, cybersecurity firm ReliaQuest experienced a social engineering attack where hackers impersonated security team members to trick an employee into accessing a fake single sign-on (SSO) page. The attackers used a lookalike domain, reliaquest.claims, and successfully obtained temporary, view-only access to the employee's identity dashboard after the employee entered their credentials and approved an MFA push notification. However, ReliaQuest's device-trust controls prevented further access to applications and systems. The company confirmed that no customer data was compromised and that the attacker's session was terminated promptly. ShinyHunters later claimed responsibility for the attack, but ReliaQuest disputed the extent of the breach, stating that no systems or sensitive data were accessed. The incident highlights the ongoing threat posed by social engineering tactics in the cybersecurity landscape. 12 sources 42

Extracted Entities

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack

The full story

Extracted Entities

Attack Types (1)

Companies (2)

CWE Weaknesses (1)

MITRE ATT&CK (2)