Web Story

Rockstar Confirms Data Breach: Hackers Used Anodot Cloud Tool to Access Snowflake

Rockstar Games confirms a third-party data breach after ShinyHunters hackers used AI analytics platform Anodot to breach its Snowflake data warehouse. Rockstar says only 'non-material' company info was taken with no impact on players or GTA 6 development, as the April 14 ransom deadline passes without major damage.

Part 1

Rockstar Games has confirmed that company information was accessed as part of a third-party data breach, after the ShinyHunters hacker group claimed responsibility and issued a 'Pay or Leak' ultimatum with an April 14 deadline. In a statement to IGN, Rockstar said: 'We can confirm that a limited amount of non-material company information was accessed in connection with a third-party data breach. This incident has no impact on our organization or our players.'

Part 2

The breach vector has been identified as AI analytics platform Anodot — a SaaS cloud-cost monitoring tool that Rockstar uses. According to The CyberSec Guru, ShinyHunters did not crack Snowflake's encryption but instead compromised Anodot's system to obtain authentication tokens, which were then used as a digital pass key to enter Rockstar's Snowflake data warehouse. Security experts noted that if a tool like Anodot is given broad read permissions on a Snowflake warehouse and that tool gets compromised, the data is effectively exposed. 'Snowflake isn't the weak link here; the integration policy is,' one expert explained.

Part 3

As the April 14 ransom deadline passed, ShinyHunters followed through with an early data release — though the leak proved underwhelming. No new Grand Theft Auto VI information was disclosed. Instead, the published data contained largely financial statistics about Rockstar's existing online titles, including market share per platform and weekly revenue per service for GTA Online and Red Dead Online.

Read the full story