Initially Cybersec Guru has reported that on the ShinyHunters website on the dark internet Rockstar Games had been added to the list of companies that were victims of a leak. The attack was not direct. The attackers took advantage of a vulnerability in Anodot, a software that uses machine learning to perceive incidents that affect revenue and costs in the cloud in real time, to obtain tokens authentication that allowed them to access Rockstar Games' Snowflake environment. Snowflake is a company that stores data in the cloud and Anodot's software can be integrated into their service.
A few hours later Rockstar Games confirmed that an attacker accessed «a limited amount of non-relevant company information.» «This incident has no impact on our organization or our players,» the company adds. ShinyHunters recommends that Rockstar Games contact them before April 14. Otherwise they will start leaking information.
There are no details about the vulnerability in Anodot that allowed ShinyHunters to access Rockstar Games data through Snowflake, but on April 7 Bleeping Computer reported that numerous cloud providers had been the target of attacks using tokens stolen. Most of the attacks were directed at Snowflake, which acknowledged «unusual activity» on a small number of accounts linked to an integration platform third-party. On April 9, Snowflake confirmed that the platform was Anodot.
It is unclear what Rockstar Games data or files ShinyHunters has in its possession. Everything seems to indicate that it does not store player information or development assets, but it does store corporate documents that could include financial information, contracts or marketing plans. If all goes according to plan, the marketing campaign for Grand Theft Auto VI will launch in the summer and the title will hit stores on November 19, 2026 for PlayStation 5 and Xbox Series.