Threats · 49 days ago
ReliaQuest says an employee was targeted in a failed social-engineering attempt after a ShinyHunters-linked breach disclosure, with the attacker posing as a member of the security team. No data theft was confirmed.
The trick was credibility, not access: the impostor used breach context and an internal-sounding approach to seem like legitimate security staff, trying to get information before any technical control mattered. That makes the disclosure itself part of the attack surface, because public details can be recycled into convincing follow-up outreach.
For technology companies, the exposure sits in the gap between incident communications and employee support channels. If a breach is public, the details can be turned into a believable pretext for fake internal-security contact, even when the original intrusion attempt failed.
4 sources covering this story
ReliaQuest Rejects Compromise Claims After ShinyHunters Incident
ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems
ReliaQuest confirms a breach attempt after an employee handed over a password, while disputing ShinyHunters' claim of deeper access.
ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
ReliaQuest confirms failed data-theft attack after ShinyHunters breach
Cybersecurity company ReliaQuest has confirmed that one of its employees was targeted in a social engineering attack after hackers impersonated a member of the security team.
Part of the PlainSec briefing for 2026-08-26