Rockstar Games Hit by Data Breach Linked to Anodot Security Incident
**Rockstar Games** has suffered a data breach stemming from a security incident at **Anodot**. The **ShinyHunters** extortion group is now leaking the stolen data, claiming it originates from compromised **Snowflake** environments.

**Rockstar Games** is grappling with the fallout from a data breach linked to a recent security incident at **Anodot**, a data anomaly detection company. The notorious **ShinyHunters** extortion gang has claimed responsibility and is actively leaking the stolen data on their data leak site.
### Breach Details
The threat actors assert that the data was exfiltrated from **Snowflake** environments by exploiting authentication tokens compromised during the **Anodot** security incident. They have published what they claim to be over 78.6 million records belonging to **Rockstar Games**.
"Your Snowflake instances metrics data was compromised thanks to Anodot.com," reads a statement on the **ShinyHunters** extortion site.

**Rockstar Games** has confirmed the breach in a statement to Kotaku, stating: "We can confirm that a limited amount of non-material company information was accessed in connection with a third-party data breach. This incident has no impact on our organization or our players."
### Data Exposure
According to the threat actors, the leaked data primarily consists of internal analytics used to monitor **Rockstar's** online services and support tickets. This includes:
* In-game revenue and purchase metrics
* Player behavior tracking
* Game economy data for Grand Theft Auto Online and Red Dead Online
* Customer support analytics for the company's **Zendesk** support instance.
File listings also indicate the presence of data related to fraud detection systems and anti-cheat model testing.
### Anodot and Snowflake's Response
This incident is tied to a broader data theft campaign originating from the **Anodot** security incident. Threat actors reportedly stole authentication tokens and leveraged them to access customer data stored in connected **Snowflake**, **Amazon S3**, and **Amazon Kinesis** instances.
**Snowflake** has acknowledged unusual activity affecting a limited number of customer accounts linked to a third-party integration, later confirmed to be **Anodot**. They responded by locking down affected accounts and notifying customers.
**ShinyHunters** claims responsibility for the attacks and alleges to have stolen data from numerous companies using the compromised tokens.
### Previous Rockstar Games Breach
This isn't the first time **Rockstar Games** has been targeted. In 2022, a hacker associated with the **Lapsus$** extortion group leaked Grand Theft Auto 6 gameplay videos and source code.