Rockstar Games confirms limited data breach linked to third-party analytics tool

Rockstar Games, the video game developer behind the Grand Theft Auto franchise, confirmed a data breach involving unauthorized access to internal systems after attackers exploited a third-party cloud analytics integration. The incident has been attributed to the cybercrime group ShinyHunters, which has threatened to release stolen data if a ransom is not paid by April 14, 2026.

The breach did not originate from Rockstar’s internal systems or its cloud data warehouse provider, Snowflake, a company specializing in cloud-based data storage and analytics. Instead, the attackers gained access through Anodot, a software-as-a-service platform used by Rockstar to monitor cloud costs and performance.

The attackers obtained authentication tokens from Anodot and used them to access Rockstar’s Snowflake environment. Because the tokens were valid, the activity appeared consistent with legitimate system behavior, allowing the intrusion to blend in with normal analytics traffic.

Rockstar confirmed the incident and stated that the scope of the breach was limited. The company said a small amount of non-sensitive corporate information was accessed and emphasized that the incident had no impact on its operations or player data.

The compromised information is believed to involve internal business materials such as reports, contracts and marketing timelines. There is no indication that player accounts, payment information or gameplay systems were affected.

ShinyHunters issued a warning to Rockstar with an April 14 deadline, threatening to release the data if demands are not met. The group has built a track record of targeting large organizations by exploiting weaknesses in application programming interfaces, identity systems and third-party integrations.

Active since 2020, ShinyHunters has been linked to multiple high-profile breaches affecting major technology and telecommunications companies, as well as large-scale data exposures involving enterprise cloud platforms. The group’s tactics often focus on leveraging trusted connections between systems, allowing attackers to bypass traditional security controls.

The breach comes at a sensitive time for Rockstar as it prepares for the release of Grand Theft Auto 6, scheduled for Nov. 19, 2026. The title is one of the most anticipated releases in the gaming industry and has been closely guarded following a previous leak in 2022 that exposed early gameplay footage.