GTA V Cheat Service Breach Exposes 64,000 Users’ Data on GitHub
A breach of Atlas Menu, a paid cheat service for Grand Theft Auto V, has exposed nearly 64,000 user accounts after the stolen database was published on GitHub. The leaked data includes email addresses, usernames, IP addresses, support tickets, and bcrypt-hashed passwords, with some reports also listing real names, signup dates, license keys, and linked Rockstar Games Social Club usernames.
The attacker claimed the breach was an act of revenge against a scammer and alleged that Atlas Menu operated as spyware, capturing screenshots from users’ machines. The service, which marketed itself as secure with "advanced encryption," is now offline, and its operators have not responded to the incident.
Atlas Menu gained notoriety by bypassing BattlEye, GTA V’s anti-cheat system, offering features like invisibility, super jumps, and flight. The breach highlights the risks of using third-party cheat tools, which often operate without accountability. Have I Been Pwned has confirmed the leak, adding it to its database of compromised accounts.
This incident follows a similar breach of a Counter-Strike: Global Offensive cheat tool years earlier and comes amid separate data-theft claims involving Rockstar Games by the group ShinyHunters, putting GTA players at risk from multiple angles.
Source: https://www.technology.org/2026/06/02/gta-v-cheat-atlas-menu-hacked-64000-exposed/
Rockstar Games TPRM report: https://www.rankiteo.com/company/rockstar-games
"id": "roc1780419141",
"linkid": "rockstar-games",
"type": "Breach",
"date": "6/2026",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'customers_affected': '64,000',
'industry': 'Gaming/Cheat software',
'name': 'Atlas Menu',
'type': 'Cheat service provider'}],
'attack_vector': 'Unknown (likely unauthorized access to database)',
'data_breach': {'data_encryption': 'Bcrypt-hashed passwords',
'data_exfiltration': 'Yes (published on GitHub)',
'number_of_records_exposed': '64,000',
'personally_identifiable_information': 'Yes (email addresses, '
'real names, IP '
'addresses)',
'sensitivity_of_data': 'High (PII and gaming-related '
'credentials)',
'type_of_data_compromised': ['Email addresses',
'Usernames',
'IP addresses',
'Support tickets',
'Bcrypt-hashed passwords',
'Real names',
'Signup dates',
'License keys',
'Rockstar Games Social Club '
'usernames']},
'description': 'A breach of Atlas Menu, a paid cheat service for Grand Theft '
'Auto V, has exposed nearly 64,000 user accounts after the '
'stolen database was published on GitHub. The leaked data '
'includes email addresses, usernames, IP addresses, support '
'tickets, and bcrypt-hashed passwords, with some reports also '
'listing real names, signup dates, license keys, and linked '
'Rockstar Games Social Club usernames. The attacker claimed '
'the breach was an act of revenge against a scammer and '
'alleged that Atlas Menu operated as spyware, capturing '
'screenshots from users’ machines. The service is now offline, '
'and its operators have not responded to the incident.',
'impact': {'brand_reputation_impact': 'Negative (allegations of spyware and '
'poor security practices)',
'data_compromised': 'Email addresses, usernames, IP addresses, '
'support tickets, bcrypt-hashed passwords, '
'real names, signup dates, license keys, '
'Rockstar Games Social Club usernames',
'identity_theft_risk': 'High (exposed PII and hashed passwords)',
'operational_impact': 'Service taken offline',
'systems_affected': 'Atlas Menu service (now offline)'},
'lessons_learned': 'Risks of using third-party cheat tools, which often '
'operate without accountability and may compromise user '
'data. Importance of secure data handling practices even '
'for non-traditional services.',
'motivation': 'Revenge',
'post_incident_analysis': {'root_causes': 'Likely poor security practices and '
'unauthorized access to database. '
'Allegations of spyware '
'functionality may have contributed '
'to the breach.'},
'recommendations': 'Users should avoid third-party cheat tools due to '
'security risks. Companies should implement robust '
'security measures, including encryption and access '
'controls, to protect user data. Monitoring for data leaks '
'and prompt incident response are critical.',
'references': [{'source': 'Have I Been Pwned'}],
'response': {'containment_measures': 'Service taken offline'},
'threat_actor': 'Unknown (attacker claimed revenge against a scammer)',
'title': 'GTA V Cheat Service Breach Exposes 64,000 Users’ Data on GitHub',
'type': 'Data Breach'}