Rockstar Games Hit by New Cloud Hack Claims

Hackers claim to have accessed Rockstar data via a cloud service, with a ransom deadline now set.

Update

Rockstar Games have released a statement via Kotaku which reads:

"We can confirm that a limited amount of non-material company information was accessed in connection with a third-party data breach.  This incident has no impact on our organization or our players."

Original Article

Rockstar Games is reportedly facing another cybersecurity incident after a hacking group claimed it accessed company data through a third-party cloud integration, with a ransom deadline now looming. While nothing currently suggests GTA VI has been delayed or directly compromised, any genuine breach could still create disruption behind the scenes at a crucial stage in the game’s build-up to launch.

A post attributed to the ShinyHunters group claims Rockstar’s “Snowflake instances” were compromised through Anodot, a third-party cloud service provider, and warns the company to “Pay or leak.” Reports say the group has set an April 14 deadline, threatening to publish the alleged stolen data if its demands are not met.

What’s New

• Hackers claim Rockstar Games was caught up in a wider cloud data breach through a third-party integration.
• The group ShinyHunters is threatening to leak the alleged data unless a ransom is paid.
• There is no confirmed evidence showing exactly what information has been taken.
• Rockstar and Take-Two have not publicly commented on the claims at the time of writing.
• There is currently no indication that GTA VI has been delayed or that player-facing services have been affected.

Hackers Claim Rockstar Was Breached Through a Third-Party Service

Early reports suggest this was not necessarily a direct breach of Rockstar’s own internal or public-facing systems. Instead, the alleged access appears to be linked to a wider campaign affecting companies that use Snowflake through a compromised third-party SaaS integration provider identified in reports as Anodot.

According to cybersecurity reporting, the attackers are believed to have obtained authentication tokens after breaching a trusted service with privileged access to customer cloud environments. That would potentially allow them to access connected systems without needing to compromise Rockstar’s own core infrastructure directly.

That distinction is important. At the time of writing, there is no sign that Rockstar’s player-facing online services have been taken offline, and the reports reviewed so far point more towards a supply-chain style compromise than a direct hack of Rockstar’s games or public platforms.

What Data Has Actually Been Taken?

That remains the biggest unanswered question. The hackers claim to have obtained a large amount of Rockstar data, but there has been no independently verified public sample clearly showing what files, systems, or internal materials may have been exposed.

Because of that, it is still too early to say whether the alleged breach involves internal business data, analytics, documentation, marketing materials, or anything tied to Rockstar’s game development pipeline. Some social media posts and secondary reports have speculated that GTA VI-related information could be involved, but those claims remain unverified.

For now, the safest reading of the situation is that Rockstar has reportedly been named as part of a wider extortion campaign, but the exact scope and seriousness of the alleged breach are still unclear.

Rockstar and Take-Two Have Not Publicly Commented

At the time of writing, Rockstar Games has not published a public statement addressing the alleged incident, and Take-Two Interactive also appears not to have commented publicly on the claims.

That silence does not confirm or disprove the hackers’ story, but it does mean there is still no official public explanation of what happened, how any access may have been gained, or whether any corporate, development, or customer data was actually exposed.

What Could This Mean for GTA VI?

Officially, nothing has changed. Rockstar still has Grand Theft Auto VI scheduled for release later this year, and there is currently no public evidence that this alleged cloud breach has affected the game’s launch plans.

However, if the hackers’ claims turn out to be genuine, the incident could still have indirect consequences for GTA VI. A breach involving third-party cloud systems could force Rockstar to carry out internal audits, tighten access controls, review vendor permissions, rotate credentials, and restrict how teams share materials across connected services.

That kind of response would not necessarily delay the game, but it could create friction during a period when Rockstar is likely coordinating development, testing, localisation, certification, marketing, and partner communications at scale. Even if no actual game files were touched, a leak involving schedules, internal presentations, campaign plans, or commercial data could complicate how Rockstar handles future GTA VI announcements.

There is also the reputational side of it. Rockstar is already under intense scrutiny following the major GTA VI leak in 2022, so any new security incident tied to the company is likely to attract outsized attention, whether or not it ends up materially affecting the game itself.

A Familiar Problem for Rockstar

This is not the first time Rockstar has found itself at the centre of a major security story. Back in 2022, early GTA VI footage leaked online in one of the most high-profile gaming breaches in recent memory. Although Take-Two said at the time that the incident would not have any long-term effect on development, it was still a major embarrassment and put Rockstar’s internal security under the spotlight.

If the latest claims are accurate, this would represent another reminder of how vulnerable large studios can be when third-party services are given deep access into business and cloud systems. It would also underline the risks that come with modern development environments, where external vendors, analytics platforms, and cloud tools are tightly woven into day-to-day operations.

What Happens Next?

The immediate question is whether the hackers follow through on their threat and whether Rockstar or Take-Two respond publicly before then. Until either of those things happens, much of the story rests on the attackers’ own claims and the wider reporting around the broader Anodot-linked Snowflake customer campaign.

For GTA VI fans, the key point right now is that there is no confirmed evidence that the game has been delayed, compromised, or directly affected. But if Rockstar really was caught up in this cloud extortion campaign, the company could still face another tense few days as it works to assess the risk and contain any fallout.