ReliaQuest confirms failed data-theft attack after ShinyHunters breach

ReliaQuest confirmed a failed social-engineering attack in which actors impersonating security staff used a fake SSO page hosted on a lookalike reliaquest.claims domain and vishing to trick an employee into submitting credentials and approving an MFA push; the attacker gained temporary view-only access to the Okta identity dashboard but was blocked from accessing applications by device-trust controls, no customer data or persistence was found, and ShinyHunters subsequently published screenshots claiming the incident.