ShinyHunters Claims Rockstar Breach; Company Confirms Limited Data Access

Summary
ShinyHunters claims it accessed Rockstar Games data through Anodot authentication tokens and threatened to leak it unless paid. Rockstar confirmed limited access to non-material company information, said there was no organizational or player impact, and did not specify,
Key points
- ShinyHunters claims it accessed data in Rockstar’s Snowflake environment and threatened to leak it unless a ransom was paid by April 14.
- The group says it used Anodot authentication tokens to access customer Snowflake accounts; the article describes this as an alleged route.
- Rockstar confirmed that a limited amount of non-material company information was accessed in connection with a third-party breach.
- Rockstar said the incident had no impact on its organization or players.
- The group did not specify what information it allegedly obtained; whether Rockstar is negotiating with the attackers is unclear.
- The article links the incident to reports of a broader Anodot compromise that may have exposed data belonging to multiple Snowflake customers.
Article Details
- Victim Organization
- Rockstar Games
- Incident Type
- Unauthorized access to company data in Rockstar Games' Snowflake environment, reportedly using Anodot authentication tokens.
- Affected Data Size
- A limited amount of non-material company information; no specific volume disclosed.
- Operational Impact
- Rockstar Games said the incident had no impact on its organization or players.
- Ransom Or Extortion
- ShinyHunters threatened to leak allegedly stolen data unless a ransom was paid by April 14. The ransom amount and whether Rockstar was negotiating were not disclosed.
- Claim Status
- confirmed
Threat Actors
Vendors
Products
AnodotShinyHunters claims it breached systems linked to Rockstar Games by using Anodot authentication tokens to access Rockstar’s Snowflake cloud environment and is threatening to leak stolen data if a ransom isn’t paid.SnowflakeShinyHunters claims it breached systems linked to Rockstar Games by using Anodot authentication tokens to access Rockstar’s Snowflake cloud environment and is threatening to leak stolen data if a ransom isn’t paid.
