ShinyHunters Breaches Rockstar Games, Leaks Data Ahead of Ransom Deadline
The hacker group ShinyHunters claims to have stolen sensitive data from Rockstar Games, leveraging an AI-powered tool called Anodot to breach the company’s Snowflake-based data warehouse. The group, which previously targeted Ticketmaster, set an April 14, 2026 deadline for ransom demands, warning of further leaks and digital disruptions if unmet. However, they have already begun releasing portions of the stolen data.
Initial leaks appear confined to GTA Online and Red Dead Online, with no evidence of compromised user personal data or details related to Grand Theft Auto VI. ShinyHunters explicitly stated in their message: “Your Snowflake instances were compromised thanks to Anodot.com. Pay or leak.”
Rockstar Games acknowledged the breach in a statement, confirming that a “limited amount of non-material company information” was accessed but insisting the incident poses no risk to operations or players. The company emphasized that the breach does not affect its infrastructure or user experience.
Rockstar Games cybersecurity rating report: https://www.rankiteo.com/company/rockstar-games
Anodot by Glassbox cybersecurity rating report: https://www.rankiteo.com/company/anodot-ai
Snowflake cybersecurity rating report: https://www.rankiteo.com/company/snowflake-computing
"id": "ROCANOSNO1776126436",
"linkid": "rockstar-games, anodot-ai, snowflake-computing",
"type": "Breach",
"date": "4/2026",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Video Game Development',
'name': 'Rockstar Games',
'type': 'Company'}],
'attack_vector': 'AI-powered tool (Anodot) exploitation of Snowflake-based '
'data warehouse',
'customer_advisories': 'Public statement assuring no risk to players or '
'operations',
'data_breach': {'data_exfiltration': 'Yes (partial leaks released)',
'personally_identifiable_information': 'None',
'sensitivity_of_data': 'Low (no personal or financial user '
'data)',
'type_of_data_compromised': 'Non-material company information '
'(game-related data)'},
'description': 'The hacker group ShinyHunters claims to have stolen sensitive '
'data from Rockstar Games, leveraging an AI-powered tool '
'called Anodot to breach the company’s Snowflake-based data '
'warehouse. The group set an April 14, 2026 deadline for '
'ransom demands, warning of further leaks and digital '
'disruptions if unmet. Initial leaks appear confined to GTA '
'Online and Red Dead Online, with no evidence of compromised '
'user personal data or details related to Grand Theft Auto VI.',
'impact': {'data_compromised': 'Limited amount of non-material company '
'information (GTA Online and Red Dead Online '
'data)',
'identity_theft_risk': 'None (no user personal data compromised)',
'operational_impact': 'No risk to operations or players (per '
'Rockstar Games)',
'payment_information_risk': 'None (no user personal data '
'compromised)',
'systems_affected': 'Snowflake-based data warehouse'},
'initial_access_broker': {'entry_point': 'Snowflake-based data warehouse via '
'Anodot tool'},
'motivation': 'Extortion (Ransom)',
'ransomware': {'data_exfiltration': 'Yes',
'ransom_demanded': 'Yes (deadline: April 14, 2026)'},
'references': [{'source': 'Cyber Incident Description'}],
'response': {'communication_strategy': 'Public statement acknowledging the '
'breach and downplaying its impact'},
'threat_actor': 'ShinyHunters',
'title': 'ShinyHunters Breaches Rockstar Games, Leaks Data Ahead of Ransom '
'Deadline',
'type': 'Data Breach',
'vulnerability_exploited': 'Snowflake data warehouse '
'misconfiguration/weakness'}