Rockstar Games Hit by Massive Data Breach: 78.6M User Records Leaked

Rockstar Games Confirms Data Breach Exposing 78.6 Million Records

On April 14, 2026, video game developer Rockstar Games acknowledged a significant data breach resulting from unauthorized access to its internal Snowflake data warehouse via a third-party integration.

The Breach Details

• The breach was attributed to the hacking group ShinyHunters.
• Over 78.6 million records were exposed.
• No sensitive data, including player passwords, payment details, personally identifiable information, source code, or GTA 6 development assets, was compromised.

The Attack Vector

• The attackers exploited a third-party service called Anodot, which provides AI-powered cloud cost monitoring and analytics for Rockstar’s digital infrastructure.
• Authentication tokens extracted from Anodot’s systems allowed the hackers to impersonate a legitimate internal service and gain access to Rockstar’s connected Snowflake data warehouse without exploiting any vulnerability in Snowflake itself.

The Leaked Data

• A comprehensive analytics dataset used for GTA Online and Red Dead Online was leaked.
• The data reveals key insights into the platforms’ performance, including:
• GTA Online generates approximately $500 million annually, primarily driven by Shark Card sales and GTA+ subscriptions.
• The PS5 is the top revenue generator, followed closely by the Xbox Series X.

Response from Rockstar

Rockstar reassured players that no sensitive data was compromised and encouraged security teams to:

• audit SaaS integrations for least privilege access,
• rotate authentication tokens regularly,
• monitor unusual Snowflake query behavior as a possible indicator of lateral movement through third-party tooling.

About Author

Vaibhav

See author's posts