ReliaQuest refutes ShinyHunters leak, says fake login was used

DATABREACHES reported that ShinyHunters listed ReliaQuest on their leak site without solid evidence, only sharing screenshots of a user account. In a blog response, ReliaQuest clarified that a threat actor created a fake single sign-on page to phish an employee, gaining temporary view-only access to their identity dashboard. No systems or customer data were compromised. ReliaQuest emphasized their strong security measures, which included device trust and immediate termination of the session. They concluded by asserting that claims of a compromise or ransomware attack were false.