ReliaQuest Rejects Compromise Claims After ShinyHunters Incident

ReliaQuest reported a social engineering campaign by ShinyHunters in which the actor registered a lookalike domain, hosted a fake SSO page, and phoned employees posing as security staff; one employee entered credentials and approved a push notification, giving the attacker a brief view-only session on the identity dashboard, but ReliaQuest says no applications, systems, or customer data were accessed and containment actions terminated the session and reset authentication.