<\/p>\n
Rockstar Games is back in the news, not over Grand Theft Auto VI delays, but because the ShinyHunters<\/a> hacking group claims it accessed the company\u2019s Snowflake environment and may be holding a large volume of data at risk of being leaked.<\/p>\n The message, published on the group\u2019s dark web leak site on April 11 (UK time), sets a deadline of April 14 and follows a familiar pattern of pay or face public exposure.<\/p>\n This case differs from a typical direct breach because the attackers pointed to Anodot, a SaaS platform used for cloud cost monitoring and analytics, as the entry point. In their post, they claimed, \u201cRockstar Games! Your Snowflake<\/a> instances were compromised thanks to \u201cRockstar Games, your Snowflake instances were compromised thanks to Anodot.com. Pay or leak. This is a final warning to reach out by 14 Apr 2026 before we leak, along with several annoying (digital) problems that\u2019ll come your way. Make the right decision, don\u2019t be the next headline.\u201d<\/em><\/p>\n ShinyHunters<\/cite><\/p><\/blockquote>\n Recent reporting<\/a> confirmed that Anodot suffered a security breach, which attackers then used as a way to access customer environments connected through integrations. Reportedly, attackers were able to extract authentication tokens from Anodot, which function as trusted credentials between services. With those tokens, they could access connected Snowflake accounts without needing to exploit vulnerabilities in Snowflake itself.<\/p>\n Once inside Snowflake environments, attackers exfiltrated data using normal database operations. Worse, because the access appeared legitimate, detection was not immediate in many cases. Several organizations were impacted before the activity was flagged and contained. <\/p>\n For your information, ShinyHunters has built a track record of targeting identity systems<\/a>, API keys, and third-party integrations instead of relying on traditional exploits. Their focus is to gain valid access, extract large databases, and then apply pressure through public leak threats.<\/p>\n Earlier this March, ShinyHunters said it had obtained<\/a> Salesforce-linked data tied to more than 400 companies. Since then, the group has published data from 26 of those organizations, giving weight to at least part of its claims. Some of the claimed and confirmed cases linked to ShinyHunters include the following organizations:<\/p>\n As for Rockstar Games, the company has not issued a statement addressing the claim. What the Anodot incident shows is that while automation and cloud integrations improve efficiency, they can also introduce serious data security risks<\/a> when access controls or tokens are exposed.<\/p>\n Nevertheless, Hackread.com has reached out to Rockstar Games<\/a> for comment. Until then, the claim reflects a real and active attack campaign, but one that has yet to be confirmed for this specific target.<\/p>\n \n\t\t\t<\/div>\nAnodot.com<\/code>. Pay or leak.\u201d<\/p>\n\n