ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack

ReliaQuest confirmed a successful social engineering attack in which an employee was tricked into entering credentials and approving an MFA push on a lookalike SSO page created by an extortion group (ShinyHunters). The attacker gained a brief, view-only session into the identity dashboard but did not access applications, customer data, or establish persistence; ReliaQuest terminated the session, forced resets, and reported no further compromise.