The hacker group ShinyHunters reports a successful attack on Rockstar Games, and the developer confirms the data breach. We summarize what is known about the background and the hackers’ demands.
Rockstar Games is once again facing a security incident following the massive GTA 6 leak of 2022.
The hacker group ShinyHuntersclaims in a post on the Dark Web,to have gained access to the studio’s cloud servers While the company behind Grand Theft Auto 6 has already confirmed the incident, the question of the scope of the stolen information remains unanswered.
Rockstar Hack: What Happened?
According to current findings the breach did not occur through a direct vulnerability in Rockstar Games’ systems. Instead, the attackers used the company Anodota third-party provider as a springboard. Anodot is a service provider for cloud cost management and analytics.
Through this detour, the hackersgained access to Rockstar’s Snowflake instances. Snowflake is a cloud-based data platform for storing, managing, and analyzing large amounts of data in real time. Typical use cases include data warehousing, data lakes, data engineering, data science, and secure data exchange.
This indirect attack vector via the supply chain is a common method, as specialized analytics services often have deep access rights to their customers’ data.
What data was stolen?
Rockstar Games confirmed in aStatement to Kotaku.com confirming that the hack occurred and that various data was accessed as part of a data breach at a third-party provider:
“We can confirm that a limited amount of non-sensitive corporate data was accessed in connection with a data breach at a third-party provider. This incident has no impact on our company or our players.”
As of now, personal user data or passwords from Rockstar accounts for games such asGTA OnlineandRed Dead Redemption 2have not been affected. The hacker group ShinyHunters, however, claims to have obtained a large collection of data.
In the past, the group has typically focused on internal business documents, contracts, marketing plans, and financial records during attacks on corporations such as Microsoft or AT&T. Unlike the 2022 leak, there is so farno indication that source code or gameplay footage from GTA 6 has been stolen.
What are the hackers’ demands?
The hack is motivated by greed; the goal is to extort money. Those in charge at Rockstar weregiven an ultimatum until April 14, 2026. If no payment is made by then, the group threatens to release the data and cause further digital problems for the company.
The group’s credibility suggests that it actually possesses internal material, even though Rockstar’s classification of the breach as “insignificant” indicates that the damage to the development of GTA 6 (scheduled for release on November 19, 2026, for PlayStation 5 and Xbox Series X/S) may be less severe than initially feared.
