Rockstar Games has been breached for the second time during Grand Theft Auto 6’s development, with hacker group ShinyHunters claiming to have accessed internal company data through a third-party cloud provider. The group has threatened to publish the stolen material online after its ransom demands were not met.
Rockstar has confirmed the breach but moved quickly to downplay its severity, stating that the incident has no impact on its operations or its players.
How The Breach Happened
ShinyHunters announced on 11 April that it had gained access to Rockstar’s servers through Anodot, a SaaS cloud-cost monitoring tool used by the studio. The group posted about the breach on its dark web leak site and set a ransom deadline of 14 April for Rockstar to pay up.
According to the hackers’ claims, the stolen data includes Rockstar’s financial records, player spending habits, marketing timelines, and contracts with outsourcing companies. ShinyHunters has not claimed to have accessed player passwords or personal account data, though security-conscious players may still want to change their Rockstar account passwords and enable two-factor authentication as a precaution.
Rockstar’s Response
In a statement sent to Insider Gaming, a Rockstar Games spokesperson said, “We can confirm that a limited amount of non-material company information was accessed in connection with a third-party data breach. This incident has no impact on our organisation or our players.”
Rockstar has confirmed it will not pay the ransom, which aligns with standard law enforcement guidance worldwide. Authorities consistently advise against paying cybercriminal ransoms, as doing so fuels the industry and offers no guarantee that hackers will actually delete stolen data.
As of the time of writing, no breached data from the hack has appeared online.
Take-Two Share Price Briefly Dipped
Following news of the breach, Take-Two Interactive, Rockstar’s parent company, saw its share price drop by more than 6% in pre-market trading. The stock did rebound to its usual levels shortly after, suggesting investors viewed Rockstar’s reassurances as credible enough to settle initial concerns.
Who Are ShinyHunters?
ShinyHunters is a prolific group of English-speaking cybercriminals believed to be teenagers. The group specialises in data theft and extortion, and has repeatedly broken into cloud storage systems used by major corporations over the past two years. They previously claimed responsibility for a high-profile hack targeting ticket operator Ticketmaster.
The BBC, which spoke directly with the hackers, reported that ShinyHunters confirmed the stolen data would be published online because their demands had not been met.
Read More: GTA 6 Delayed Again, Now Set for November 2026 Launch
Read More: GTA Online Twitch Drops – How to Earn Up to $1 Million and a Free Outfit in GTA Online
The 2022 Rockstar Hack And Its Fallout
This is not the first time Rockstar has been targeted during GTA 6’s development. In 2022, an 18-year-old British hacker named Arion Kurtaj, part of a teen hacking gang called Lapsus$, breached Rockstar’s internal Slack channels and leaked over 90 in-development gameplay videos of GTA 6 across online forums.
That hack had a far more damaging impact. The leaked footage forced Rockstar to release its GTA 6 trailer ahead of schedule, and the breach reportedly caused significant delays to the game’s development. Kurtaj was eventually caught and given an indefinite hospital order following a court hearing, during which prosecutors described the leaked material as “highly confidential” given the franchise’s billion-dollar value.
Rockstar had reportedly strengthened its internal security following the Lapsus$ attack. The studio also recently fired more than 30 staff members in the UK and abroad, claiming they had discussed confidential information in a public forum. Those layoffs have drawn criticism, with affected employees alleging they were punished for efforts to establish a union.
What This Means For GTA 6
Unlike the 2022 breach, which exposed actual in-development game footage and source code, this latest hack appears to involve corporate and business data rather than game assets. Rockstar’s statement explicitly describes the accessed information as “non-material,” and there have been no claims from ShinyHunters that GTA 6 development files were compromised.
Grand Theft Auto 6 remains scheduled to launch on 19 November 2026 for PlayStation 5 and Xbox Series S|X. No official release date for PC has been announced. If any of the stolen data does surface online, we will update this article.