Rockstar Confirms Limited Data Access After ShinyHunters Extortion Threat

Summary

Rockstar confirmed limited access to non-material company information and said there was no impact on the company or players. ShinyHunters claimed access via Snowflake and threatened to leak data, but the data it may hold is unspecified.

Key points

Rockstar confirmed that a limited amount of non-material company information was accessed in connection with a third-party breach.
The company said the incident had no impact on its organization or players.
ShinyHunters claimed on its leak site that Rockstar’s Snowflake instances were compromised and demanded contact by April 14, 2026, threatening to leak data.
The article reports that access may have come through Anodot, which had reportedly suffered a security breach; this route is not confirmed.
ShinyHunters has not publicly specified what data it claims to hold. The article says passwords and personal player data are not believed to be involved.

Article Details

Victim Organization: Rockstar Games
Incident Type: Data breach involving access to company information in connection with a third-party breach. ShinyHunters claimed it accessed Rockstar's Snowflake instances via Anodot; the reported access route has not been confirmed by Rockstar.
Disclosure Date: 2026-04-11
Data Types Exposed: Non-material company information; specific data types were not disclosed
Affected Data Size: Rockstar described a limited amount of information as accessed; no volume was disclosed. ShinyHunters claimed it held a large collection of data.
Operational Impact: Rockstar stated the incident had no impact on its organization or players.
Ransom Or Extortion: ShinyHunters demanded a digital ransom by April 14, 2026, and threatened to leak data. Whether any ransom was paid or data was leaked was not reported.
Claim Status: confirmed

Threat Actors

ShinyHuntersClaimed responsibility for breaching Rockstar Games, accessing its data, and threatening to leak it unless a ransom was paid. Rockstar confirmed a data breach but did not confirm the group's claimed access route or the amount of data it said it held.

Vendors

Anodot“Rockstar Games, your Snowflake instances were compromised thanks to Anodot.com. Pay or leak. This is a final warning to reach out by 14 Apr 2026 before we leak, along with several annoying (digital) problems that’ll Snowflakethe hacker group posted on its dark web site dedicated to leaks that it had gained access to Rockstar’s Snowflake servers, a cloud-hosting company and provider that works with many large companies. Here is the message

Products