Rockstar Games hit by new data breach, claims "limited amount of non-material company information" was compromised

GTA 6 developer Rockstar Games has confirmed it has fallen victim to another data breach after an extortion group claimed to have accessed internal company information and threatened to leak it if a ransom is not paid.

The details:

• On Saturday, hacking collective ShinyHunters claimed that it had successfully breached Rockstar, stealing what it referred to as a “large amount” of data involving information related to customers, internal finances, and more. The group stated that if the studio failed to pay an undisclosed amount by April 14, it would leak the data online.
• The group says it accessed Rockstar’s data by exploiting analytics platform Anodot, which is used to monitor cloud costs, and then using stolen authentication tokens to reach the company’s Snowflake cloud instances rather than directly breaking Rockstar’s or Snowflake’s core security.
• Rockstar has now confirmed the breach in a new statement, sharing that “a limited amount of non-material company information was accessed in connection with a third-party data breach,” but insisted that the incident “has no impact on our organization or our players.”
• This is the second data breach at Rockstar in recent years but is significantly less disruptive than the original 2022 attack, which saw in-development GTA 6 gameplay footage leaked online by a single teenage hacker.