Rockstar Games affected by data breach, “limited amount of non-material information” accessed

Rockstar Games confirmed it suffered a data breach this weekend when the hacking group ShinyHunters gained unauthorized access to the developer’s Snowflake cloud data warehouse through a compromised third-party SaaS platform called Anodot, which Rockstar uses for cloud cost monitoring and analytics. The hackers posed as a legitimate internal service to access the servers.

ShinyHunters, described as a prolific group of English-speaking cybercriminals believed to be teenagers, demanded a ransom with a deadline of April 14, warning “pay or leak.” However, Rockstar refused to negotiate and confirmed it will not pay the ransom. The hacker group subsequently confirmed to the BBC that it will release the stolen data online since its demands were not met.

Rockstar downplayed the severity of the incident, stating that “a limited amount of non-material company information” was accessed and that the breach has “no impact on our organisation or our players.” The exact nature of the stolen data remains unclear, though security outlet The CyberSec Guru suggested it could include financial records for GTA Online and Red Dead Online.

The timing is significant as it comes ahead of the highly anticipated launch of Grand Theft Auto 6. Global law enforcement continues to advise against paying ransoms to cybercriminals, as doing so encourages further attacks and theft.

Sources

• Rockstar Games affected by data breach, “limited amount of non-material information” accessed
• Ahead Of GTA 6, Rockstar Hacked By Ransomware Group Again
• Rockstar Games Hackers Say They Will Publish Stolen Data Online Because Their Ransom Demands Have Not Been Met, but GTA 6 Dev Insists ‘This Incident Has No Impact’
• GTA 6 Hackers Say Stolen Data “Will be Published as Their Demands Had Not Been Met”
• Hacker group confirms it will release stolen Rockstar Games data