ReliaQuest Denies Breach After Social Engineering Attack

Cybersecurity firm ReliaQuest disclosed on August 23, 2026, that it was the target of a social engineering attack on August 22, in which a threat actor impersonated a company security employee to trick a staff member into granting temporary, view-only access to its identity dashboard. The company stated that its security controls prevented any access to applications, systems, or customer data, and it firmly denied claims of a broader compromise or ransomware incident. The attack began when the threat actor registered a lookalike domain and created a fake ReliaQuest single sign-on page behind a content delivery network.