INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

ShinyHunters claims hack of ReliaQuest

| 2026-08-23 15:07 CRITICAL MEDIUM DATA BREACH
JSON
Executive Summary
AI-generated
On August 17, ShinyHunters claimed to have hacked ReliaQuest, a cybersecurity firm, and subsequently deleted its tweet about the incident after being replied by @odysseusgroup. The claim was made on ShinyHunters' dedicated leak site, which named ReliaQuest, LLC as the targeted entity, but offered no substantial evidence to support its claims. A post on August 23 stated that this time the attack is "about you, not us" and included a message warning ReliaQuest to negotiate or face data leakage. ShinyHunters has since uploaded three images showing a user logged in to reliaquest[.]okta.com/enduser/settings. The incident occurred in the United States (‎United States) and involved APT Group actor ShinyHunters, Identified Entity ReliaQuest, LLC, and General Metric 1 ReliaQuest.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ShinyHuntersShinyHunters
Target & Sectors
NORTH_AMERICA NORTH_AMERICA
Incident Timeline
‎2026/08/23
ShinyHunters claimed to have hacked ReliaQuest, but the company has not confirmed this.
threat_actor ShinyHunters
ShinyHunters claims hack of ReliaQuest; no confirmation by ReliaQuest (1).
A @ReliaQuestTR tweet about ShinyHunters on August 17 was deleted after a reply by @odysseusgroup.
Cybersecurity firm ReliaQuest has reported its research findings about ShinyHunters multiple times recently .
On August 17,  @ReliaQuestTR tweeted that they were tracking yet another ShinyHunters campaign.
On its dedicated leak site, ShinyHunters named ReliaQuest, LLC, but has offered no substantial evidence to support its claims.
So far, all ShinyHunters has uploaded has been three images that appear to show a user logged in to reliaquest[.]okta.com/enduser/settings.
This post was edited post-publication to note the three images ShinyHunters had uploaded that DataBreaches had not noticed or reported previously.
Intelligence Sources
Data Breaches 2026-08-23