Failed Social Engineering Attack on ReliaQuest by ShinyHunters

• •ReliaQuest was targeted in a social engineering attack by ShinyHunters.
• •The attack involved impersonation and a fake SSO page, resulting in temporary view-only access.
• •No customer data was compromised, and security controls effectively blocked further access.

On August 22, 2026, cybersecurity firm ReliaQuest experienced a social engineering attack where hackers impersonated security team members to trick an employee into accessing a fake single sign-on (SSO) page. The attackers used a lookalike domain, reliaquest.claims, and successfully obtained temporary, view-only access to the employee's identity dashboard after the employee entered their credentials and approved an MFA push notification. However, ReliaQuest's device-trust controls prevented further access to applications and systems. The company confirmed that no customer data was compromised and that the attacker's session was terminated promptly. ShinyHunters later claimed responsibility for the attack, but ReliaQuest disputed the extent of the breach, stating that no systems or sensitive data were accessed. The incident highlights the ongoing threat posed by social engineering tactics in the cybersecurity landscape.