ShinyHunters provided no real proof they hacked ReliaQuest– because they didn’t get anywhere: ReliaQuest

ReliaQuest responded to claims that ShinyHunters breached the company, explaining that an attacker used a lookalike domain and fake SSO page to socially engineer a teammate into approving a push notification. The attacker gained a brief, view-only identity-provider session which was terminated; ReliaQuest reports no access to applications or customer data, containment actions were taken (session termination, password expiry, auth factor resets), and they dispute claims of a wider compromise or ransomware.