ReliaQuest Denies Breach After Social Engineering Attack

Cybersecurity firm ReliaQuest disclosed on August 23, 2026, that it was the target of a social engineering attack on August 22, in which a threat actor impersonated a company security employee to trick a staff member into granting temporary, view-only access to its identity dashboard. The company stated that its security controls prevented any access to applications, systems, or customer data, and it firmly denied claims of a broader compromise or ransomware incident.

The attack began when the threat actor registered a lookalike domain and created a fake ReliaQuest single sign-on page behind a content delivery network. The attacker then called multiple ReliaQuest employees, each time posing as a named member of the security team, in an attempt to direct them to the fraudulent login page. One employee entered their password and approved a multifactor authentication push notification on their phone, which provided the attacker with a brief session on the company's identity dashboard.

ReliaQuest emphasized that the access was strictly view-only. The company's defense-in-depth model, which includes device-trust controls that prevent non-corporate devices from accessing enterprise...