The hacking group known as ShinyHunters confirmed to the BBC that it intends to release data stolen from Rockstar Games. The group claims the breach occurred after it gained unauthorized access to the developer's servers hosted on Snowflake.
ShinyHunters reached out to the BBC directly to confirm that its ransom demands were ignored. The group, described by the outlet as a collective of English-speaking cybercriminals often in their teens, specializes in extortion and data theft.
Rockstar previously addressed the incident in a statement to Kotaku. The company acknowledged that a "limited amount of non-material company information" was accessed during the breach. However, Rockstar maintained that the incident would have "no impact on our organization or our players."
The path of the breach
Reports suggest the infiltration originated from a security compromise at Anodot, a cloud cost monitoring service. Access to Anodot’s systems reportedly provided the hackers with a gateway into Rockstar’s Snowflake-hosted servers, which they then used to leverage their blackmail attempt.
Law enforcement agencies consistently advise companies against paying ransoms in these scenarios. Experts note that paying these groups does not guarantee the safety of the stolen data and often incentivizes further criminal activity.
While Rockstar has downplayed the severity of the incident, the exact nature of the stolen files remains unclear. The company has not provided further updates on what specific internal documents or information were compromised in the attack.
ShinyHunters has indicated that it plans to publish the stolen data on its dark web pages. Such data typically migrates to the broader internet once it is released on these private platforms.
