
Rockstar Games, the developer behind Grand Theft Auto, has confirmed a data breach for the second time in three years.
This time, hackers entered not through Rockstar's own systems but through Anodot, a third-party cloud cost-monitoring service, before threatening to leak corporate data unless paid.
ShinyHunters did not target Rockstar directly. The group exploited a security flaw at Anodot, a cloud cost-monitoring service used by Rockstar, to access the company's data.
The entry point was a trusted vendor, not Rockstar's own core infrastructure.
According to NDTV Profit, ShinyHunters claimed to possess sensitive, non-public company information and set a deadline of April 14, 2026, to release it unless a ransom was paid.
Rockstar confirmed only that "a limited amount of non-material company information" was accessed.
Is GTA VI's Development at Risk?
Rockstar confirmed that player data, passwords, and GTA VI source code and gameplay footage were not compromised.
The breach appears focused on corporate, financial, or marketing data, rather than anything directly tied to game development.
10 Apr 2026 - Vol 04 | Issue 66
And the price of surviving it
Rockstar told the BBC the incident has "no impact on our organisation or our players."
The company has not detailed what was taken. Corporate and financial records carry their own reputational risk, even when no gameplay assets are involved.
According to NDTV Profit, ShinyHunters is known for targeting major corporations including Microsoft, Ticketmaster, and AT&T.
Their method relies on exploiting trusted third-party integrations rather than targeting a company's own systems, which is precisely what makes them difficult to detect.
How Does This Compare to the Damaging 2022 Breach?
The 2022 Rockstar Games hack, carried out by 18-year-old Arion Kurtaj of the Lapsus$ gang, leaked 90 video clips of GTA 6, forcing Rockstar to release its official trailer ahead of schedule.
This breach appears narrower in scope but could still expose sensitive business intelligence.
What Should Players and Industry Watchers Do Next?
Rockstar has confirmed no player passwords or personal data were stolen.
Still, cybersecurity experts and law enforcement worldwide advise against companies paying ransoms, as it funds further attacks and offers no guarantee stolen data will be deleted or kept private.