Rockstar confirms Snowflake breach

Rockstar Games said a third-party data breach exposed “a limited amount of non-material company information,” after ShinyHunters threatened to leak internal files. (ign.com) The studio told IGN on April 11 that the incident had “no impact” on players or on Rockstar’s operations. ShinyHunters had posted a ransom threat with an April 14 deadline. (ign.com) (timesofindia.indiatimes.com) Reports tied the access to Rockstar’s Snowflake environment, a cloud data warehouse companies use to store and analyze internal business data. TechSpot reported the attackers said they reached it through Anodot, a software vendor Rockstar uses for cloud analytics, rather than by breaking into Rockstar’s own systems or Snowflake itself. (techspot.com) That distinction tracks with the larger Snowflake breach wave disclosed in 2024. Google-owned Mandiant said the campaign it tracked did not come from a breach of Snowflake’s corporate environment, but from stolen customer credentials used to log into individual Snowflake accounts. (cloud.google.com) Mandiant said every Snowflake case it investigated in that campaign involved compromised credentials, and the affected accounts it examined did not have multi-factor authentication enabled. The victim list grew to more than 160 organizations, including Ticketmaster, AT&T and Santander, according to multiple breach summaries published after the incident. (cloud.google.com) (cloudsecurityalliance.org) For Rockstar, the immediate concern is what kind of internal planning documents were taken. Kotaku reported the group claimed to have material related to Grand Theft Auto VI, including marketing plans and other company records, though Rockstar has not publicly authenticated specific files. (kotaku.com) The timing is sensitive because Grand Theft Auto VI is Rockstar’s biggest scheduled release. Rockstar said in a November 6, 2025 Newswire post that the game is set to launch on November 19, 2026. (rockstargames.com) Rockstar has dealt with a major leak before. In September 2022, an attacker posted early Grand Theft Auto VI development footage online, and Rockstar said at the time it was “extremely disappointed” by the intrusion while adding that long-term development of the next Grand Theft Auto would continue as planned. (rockstargames.com) This time, Rockstar’s public line is narrower and more controlled: company data was accessed, players were not affected, and operations are unchanged. Whether any documents are ultimately published will determine if this stays a contained corporate breach or becomes another public leak around Grand Theft Auto VI. (ign.com)