Particle.news
Download on the App Store

Rockstar Confirms Third-Party Breach as ShinyHunters Vow to Leak Data

The case underscores how stolen tokens in a vendor tool can open a path into cloud-stored company data.

Overview

  • ShinyHunters told the BBC on Monday it will publish data taken from Rockstar after posting a “pay or leak” demand with an April 14 deadline.
  • Rockstar says only a limited amount of non‑material company information was accessed and reports no impact on players or day‑to‑day operations.
  • Security reports point to access through Anodot, a cloud cost and analytics tool, where stolen authentication tokens let attackers use Snowflake like a trusted service.
  • Snowflake says it found unusual activity in a small number of customer accounts tied to third‑party integrations and has locked down those accounts as a precaution.
  • Outlets say the trove likely involves corporate analytics such as financial records, marketing timelines, contracts, and player spending data rather than game source code, a contrast to Rockstar’s major 2022 leak.