Eurogamer Rockstar Games Faces Ransom Deadline After Data Breach by ShinyHunters
Article Content
- •ShinyHunters accessed Rockstar's data via a third-party service, Anodot.
- •Rockstar claims only non-material information was compromised, with no impact on players.
- •A ransom demand has been set for April 14, 2026, threatening data leaks if unmet.
On April 11, 2026, Rockstar Games confirmed a data breach involving the hacker group ShinyHunters, which accessed company data through a third-party cloud service, Anodot. The attackers exploited vulnerabilities in Anodot to obtain authentication tokens, allowing them to access Rockstar's Snowflake data warehouse. ShinyHunters has demanded a ransom by April 14, threatening to leak sensitive internal documents if their demands are not met. Rockstar has stated that only a limited amount of non-material company information was accessed, emphasizing that player data and the development of Grand Theft Auto 6 remain unaffected. The breach highlights the risks associated with third-party services used by large corporations. Investigations are ongoing to assess the full extent of the breach and its implications for Rockstar's operations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (56)
Following this threat?
Track shinyhunters and Anodot in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploit in BeyondTrust Remote Support Disclosed BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE. The flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring credentials or user… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…