rockstar games / shinyhunters / anodot

A notorious hacking group, ShinyHunters, claims it accessed Rockstar Games’ corporate data via a third-party cloud analytics service and is threatening to publish the material after saying its ransom demands were not met. Rockstar confirmed a breach tied to a third-party service and said only a limited amount of non-material company information was accessed, asserting there is no impact to players or its organization. Reporting links the incident to Anodot and Snowflake, suggesting the compromise occurred through a SaaS analytics pipeline rather than a direct intrusion of Rockstar’s systems. The potential leak raises supply-chain and cloud security concerns for game developers and other enterprises using third-party analytics.

ShinyHunters claims it accessed Snowflake metrics for Rockstar Games by abusing a third-party integration with cloud monitoring vendor Anodot, posting a pay-or-leak ultimatum and threatening to publish stolen data by 14 Apr 2026. Rockstar confirmed a "limited amount of non-material company information" was accessed via a third-party breach and said there is no impact to players or operations, without detailing the data or ransom status. The incident fits ShinyHunters' pattern of targeting APIs, SaaS integrations and stolen authentication tokens rather than exploiting core services, echoing prior breaches of Cisco and Telus and Rockstar's 2022 Slack-related GTA VI leak. It highlights risks from vendor connections and token misuse in modern cloud ecosystems.

Established hacker group ShinyHunters claims it breached Rockstar Games’ Snowflake-hosted data via a third-party compromise at cloud analytics provider Anodot, threatening to leak corporate files unless paid by April 14, 2026. Rockstar confirmed a limited breach of non-material company information tied to a third-party incident and said players aren’t impacted. Reported exposed assets likely include contracts, financials, and marketing materials rather than player passwords or personal data. ShinyHunters, active since 2020, has previously targeted major firms and typically ransoms or sells stolen data; the group’s access method reportedly mimicked legitimate Anodot activity. The episode echoes Rockstar’s 2022 GTA 6 leak and highlights supply-chain and cloud-service risks for game studios and other enterprises.

Rockstar Games confirmed a limited data breach after hacker group ShinyHunters claimed to have accessed Rockstar’s Snowflake-hosted data via a compromised third party, cloud analytics provider Anodot, and demanded a digital ransom by April 14. ShinyHunters posted on their leak site saying the access likely appeared legitimate to Rockstar because it leveraged Anodot credentials; the group has a track record of extorting and selling corporate data from major targets. Rockstar says only a limited amount of non-material company information was accessed and that players are unaffected, but the leaked assets could include contracts, financials, marketing plans and other sensitive corporate documents. The incident echoes Rockstar’s 2022 GTA 6 asset leak and underscores supply-chain risk from cloud service integrations.