ShinyHunters Strikes Rockstar Games Again, Leaking 8.1GB of Anti-Cheat Code Ahead of *GTA VI* Launch On September 21, 2026, the extortion group ShinyHunters claimed a second breach of Rockstar Games in five months, this time leaking 8.1GB of data, including anti-cheat source code, internal game data, and analytics. The incident, reported by Security Affairs, comes just two months before the November 19 launch of *Grand Theft Auto VI*, raising concerns about the integrity of the game’s anti-cheat systems at a critical juncture. ### What Was Leaked? The alleged data set includes: - Anti-cheat code – A critical component for detecting cheating in online multiplayer, whose exposure could allow cheat developers to reverse-engineer detection methods. - Internal game data – Potentially sensitive build information or analytics tied to Rockstar’s development pipeline. - Analytics records – Likely used for monitoring game performance and player behavior. Unlike the April 2026 breach, where ShinyHunters stole 78.6 million records via a compromised third-party vendor (Anodot) linked to Rockstar’s Snowflake cloud instance, this incident appears to be a separate intrusion though the attack vector remains unconfirmed. Rockstar has not publicly verified the authenticity or scope of the leak as of this report. ### Why This Breach Matters Anti-cheat systems rely on obscurity once their detection logic is exposed, cheat developers gain a blueprint to bypass protections. The timing is particularly damaging for Rockstar, as GTA VI’s launch window is when anti-cheat measures are typically finalized to prevent day-one cheating. A similar incident in September 2026 saw hackers bypass *DeathSprint 66*’s anti-cheat after a two-year reverse-engineering effort a process that could be accelerated if attackers start with leaked source code. The breach also amplifies existing concerns about Rockstar’s security posture. The company was previously targeted in 2022, when unreleased GTA VI footage was leaked, forcing an early reveal of the game. ShinyHunters’ repeat targeting of Rockstar suggests the group views the publisher as a high-value, high-publicity target, where even unconfirmed leaks generate significant media attention. ### Broader Industry Impact This incident reflects a growing trend of attacks on gaming companies, with anti-cheat systems and intellectual property becoming prime targets. Other recent breaches in September 2026 include: - Kakao Games – Unauthorized access to user data (140 affected). - Gyazo – A server vulnerability exposed 23.6 million user records. - DeathSprint 66 – Hackers bypassed its anti-cheat without a source-code leak, demonstrating the long-term risks of such exposures. Unlike consumer data breaches, which trigger regulatory disclosures, leaks of anti-cheat code or internal game data often remain unconfirmed for weeks or months, leaving studios in a prolonged state of uncertainty. ### What Happens Next? Based on past incidents, several developments are likely: - Rockstar or parent company Take-Two Interactive may issue a limited statement acknowledging the incident without confirming the full 8.1GB scope. - If the leaked anti-cheat code is verified, security researchers will likely analyze its detection methods within 30 days. - Cheat developers may exploit the news cycle to market "undetected" tools, regardless of the leak’s authenticity. - Pre-launch scrutiny of GTA VI’s anti-cheat measures will intensify, potentially prompting Rockstar to patch or replace systems before or after release. For now, the breach remains unconfirmed, but its potential impact on fair play, launch stability, and player trust makes it one of the most consequential cybersecurity incidents in gaming this year.

Rockstar Games Reveals Extreme Security Measures to Protect *GTA 6* from Leaks Rockstar Games has disclosed unprecedented security protocols to safeguard GTA 6 from leaks, drawing comparisons to Apple’s iPhone and Coca-Cola’s formula protections. The details emerged during a Glasgow Employment Tribunal beginning September 10, 2026, where 34 former UK and Canadian developers allege wrongful termination. To counter espionage, Rockstar implemented strict measures after outsiders used drones to photograph employees through office windows. The studio now enforces a ban on external storage devices, prohibits visitor photography, and restricts remote work. A dedicated anti-leak team comprising five investigators and a director monitors potential disclosures. Despite these efforts, breaches have occurred. A 2022 data leak and the unauthorized release of GTA 6 gameplay footage ahead of its Netflix premiere prompted public frustration from Rockstar, which called the leaks "heartbreaking" for the development team. The tribunal centers on the dismissals of the 34 developers, whom Rockstar claims were fired for sharing game details via Discord. The workers, represented by the Independent Workers of Great Britain union, argue the terminations were retaliation for union activities a claim Rockstar denies. The former employees have urged supporters not to boycott GTA 6 and are selling merchandise to fund legal costs. Meanwhile, Blizzard Entertainment, under Microsoft, finalized a separate union agreement this week, marking a contrasting labor development in the gaming industry.

GTA 6 Leak Investigation: Take-Two Targets Discord Servers in Data Hunt Take-Two Interactive, the publisher behind Grand Theft Auto (GTA), is pursuing legal action to uncover the source of a recent GTA 6 leak. On August 20, the company issued subpoenas to Microsoft and Discord, demanding extensive user data including IP addresses, phone numbers, linked accounts, and device identifiers from members of three Discord servers dating back to June 1. The leak originated on August 17, when an account named CyberLeek posted unreleased GTA 6 footage and a portion of the game’s map. The leaker framed the act as an ideological protest, demanding that publishers stop releasing digital-only games, cease locking single-player content behind paywalls, and commit to preserving single-player modes. CyberLeek also issued a warning to game publishers: "Behave, or be the next target." Alongside the leaks, CyberLeek launched a Solana-based cryptocurrency token, $CYBERLEEK, which it promoted as a voting mechanism for future leaks. Critics accused the group of using the hype to inflate the token’s value, though CyberLeek later "burned" its holdings erasing the tokens while retaining the ability to collect trading fees, which reportedly reached $60,000. Among those caught in Take-Two’s data sweep is DarkViperAU, an Australian GTA 5 streamer whose Discord server was subpoenaed. He denied involvement, stating he had no knowledge of the leak. Microsoft and Discord have until September 4 to comply, potentially exposing identifying details of hundreds or thousands of users with no direct connection to the incident. This is not the first cybersecurity incident for Take-Two. In April, the ShinyHunters hacking group stole 78.6 million Rockstar records by targeting Anodot, a third-party analytics vendor with access to persistent authentication tokens. The breach followed a September 2022 leak of GTA 6 footage, underscoring the franchise’s recurring vulnerability to unauthorized disclosures. The leaks have also fueled scams, with fraudsters exploiting interest in GTA 6 to distribute malware, phishing links, and fake early-access offers. Security researchers recently identified malicious sites impersonating GTA 6 demos, designed to steal passwords and cryptocurrency. The game is set for release in November on consoles, with a PC version expected later.

GTA V Cheat Service Breach Exposes 64,000 Users’ Data on GitHub A breach of Atlas Menu, a paid cheat service for Grand Theft Auto V, has exposed nearly 64,000 user accounts after the stolen database was published on GitHub. The leaked data includes email addresses, usernames, IP addresses, support tickets, and bcrypt-hashed passwords, with some reports also listing real names, signup dates, license keys, and linked Rockstar Games Social Club usernames. The attacker claimed the breach was an act of revenge against a scammer and alleged that Atlas Menu operated as spyware, capturing screenshots from users’ machines. The service, which marketed itself as secure with "advanced encryption," is now offline, and its operators have not responded to the incident. Atlas Menu gained notoriety by bypassing BattlEye, GTA V’s anti-cheat system, offering features like invisibility, super jumps, and flight. The breach highlights the risks of using third-party cheat tools, which often operate without accountability. Have I Been Pwned has confirmed the leak, adding it to its database of compromised accounts. This incident follows a similar breach of a Counter-Strike: Global Offensive cheat tool years earlier and comes amid separate data-theft claims involving Rockstar Games by the group ShinyHunters, putting GTA players at risk from multiple angles.

Vimeo Confirms Data Breach via Third-Party Analytics Vendor Anodot Vimeo has disclosed a data breach stemming from a security incident at Anodot, its third-party business analytics provider. The breach, attributed to the cybercriminal group ShinyHunters, exposed certain user and customer data, though no video content, login credentials, or payment information was compromised. According to Vimeo’s statement, the accessed data primarily included technical metadata, video titles, and, in some cases, customer email addresses. The company responded by revoking Anodot’s access, removing the integration, and enlisting third-party security experts to investigate. Law enforcement has also been notified. ShinyHunters listed Vimeo on its leak site on Tuesday, threatening to release stolen data unless a ransom was paid by Thursday. The group has been linked to a series of high-profile attacks in 2026, including breaches at McGraw Hill, ADT, and Rockstar Games with the latter also tied to the Anodot compromise. Reports suggest a broader supply-chain attack involving Anodot may have exposed data from multiple organizations. Google Threat Intelligence previously detailed ShinyHunters’ tactics, which rely on phishing schemes rather than software vulnerabilities. Despite law enforcement crackdowns in 2025, the group remains active, recently targeting Match Group (owner of Tinder, Hinge, and OkCupid) before shifting focus to its current campaign. The investigation into the Vimeo breach is ongoing.

ShinyHunters Breaches Rockstar Games, Leaks Data Ahead of Ransom Deadline The hacker group ShinyHunters claims to have stolen sensitive data from Rockstar Games, leveraging an AI-powered tool called Anodot to breach the company’s Snowflake-based data warehouse. The group, which previously targeted Ticketmaster, set an April 14, 2026 deadline for ransom demands, warning of further leaks and digital disruptions if unmet. However, they have already begun releasing portions of the stolen data. Initial leaks appear confined to GTA Online and Red Dead Online, with no evidence of compromised user personal data or details related to Grand Theft Auto VI. ShinyHunters explicitly stated in their message: “Your Snowflake instances were compromised thanks to Anodot.com. Pay or leak.” Rockstar Games acknowledged the breach in a statement, confirming that a “limited amount of non-material company information” was accessed but insisting the incident poses no risk to operations or players. The company emphasized that the breach does not affect its infrastructure or user experience.

ShinyHunters Claims Rockstar Games Breach via Anodot-Snowflake Integration Threat group ShinyHunters has listed Rockstar Games on its leak site, alleging a data breach through a compromised Anodot-Snowflake integration. The group has set an April 14 deadline for the studio to respond to its ransom demands. This incident follows Rockstar’s 2022 breach, where early Grand Theft Auto VI footage was leaked via a social engineering attack on its internal Slack. Unlike that incident orchestrated by an individual this latest threat appears to be part of a larger campaign targeting companies using cloud-based data warehousing and monitoring tools. ShinyHunters, known for high-profile breaches at Ticketmaster, AT&T, and Microsoft, allegedly bypassed Rockstar’s security by exploiting an automated integration with Anodot, a third-party cloud-cost monitoring platform. The group claims to have accessed Rockstar’s Snowflake environment which stores analytical data and player telemetry by harvesting authentication tokens from Anodot. This method allows attackers to bypass multi-factor authentication using long-lived service tokens, a tactic ShinyHunters has increasingly employed since late 2025. Rockstar is not the only target. The group has also listed Amtrak and McGraw Hill, claiming to have compromised over 100 million records through third-party Salesforce integrations. While Rockstar and its parent company, Take-Two Interactive, have yet to issue an official statement or regulatory disclosure, the breach if confirmed could expose sensitive corporate and player data. The April 14 deadline suggests the group may release the data if demands are unmet.

Rockstar Games Denies Major Breach Ahead of *GTA VI* Launch Rockstar Games has dismissed reports of a significant cyberattack targeting the upcoming release of Grand Theft Auto VI, set for November 19. Earlier claims suggested hackers had breached the company’s systems and demanded a ransom to prevent the leak of sensitive data. In a statement, Rockstar confirmed that a data breach did occur but it involved a third-party vendor, not its internal systems. The company emphasized that the incident has had no impact on its operations or players. No further details about the affected vendor or the nature of the exposed data were disclosed. The rumors surfaced amid heightened anticipation for GTA VI, one of the most highly anticipated games in history. While the breach appears contained, the incident underscores ongoing cybersecurity risks in the gaming industry, particularly for high-profile releases. Rockstar has not indicated whether law enforcement is investigating the matter.

Rockstar Games Suffers Major Data Breach: Millions of Business Records Stolen On December 5, 2023, a hacking group claimed responsibility for stealing millions of business records from Rockstar Games, the developer behind the Grand Theft Auto franchise. The breach, which remains under investigation, reportedly exposed sensitive internal data, though the full scope and nature of the compromised records have not been publicly disclosed. The incident highlights growing cybersecurity threats targeting major entertainment and gaming companies, which often hold vast amounts of proprietary and customer-related information. While Rockstar has not confirmed the extent of the breach, the theft of such a large volume of records could have significant implications for the company’s operations, intellectual property security, and stakeholder trust. No details have been released regarding the hacking group’s identity, motives, or whether the stolen data has been leaked or sold. The breach follows a pattern of high-profile cyberattacks on gaming studios, underscoring the industry’s vulnerability to digital espionage and data theft. Further updates are expected as the investigation progresses.

Rockstar Games Hit by Second Major Hack in Three Years; Stolen GTA 6 Footage Leaked Rockstar Games, the developer behind the Grand Theft Auto franchise, confirmed a cyberattack after hackers leaked 90 video clips of unfinished GTA 6 gameplay online. The breach, attributed to the cybercriminal group ShinyHunters, occurred over the weekend when attackers claimed to have infiltrated Rockstar’s servers via a third-party cloud provider. The group demanded a ransom, threatening to release additional stolen data including source code and internal files if their demands were not met. Rockstar downplayed the incident, stating the breach involved "a limited amount of non-material company information" and would have "no impact" on its operations or players. However, the leak forced the company to accelerate the release of its official GTA 6 trailer, originally planned for later in the year. ShinyHunters, a prolific English-speaking hacking collective believed to consist of teenage cybercriminals, has a history of targeting major corporations through cloud storage breaches. The group previously claimed responsibility for high-profile attacks, including those on other gaming and tech firms. This marks the second time Rockstar has been hacked in three years, following a 2022 breach by the Lapsus$ gang, which also involved the theft of GTA 6 development materials. Law enforcement agencies, including the FBI, advise against paying ransoms, citing concerns that such payments fund further criminal activity without guaranteeing the deletion of stolen data. The incident underscores ongoing vulnerabilities in third-party cloud security, particularly for high-profile targets in the gaming industry.

Rockstar Games suffered from a network intrusion in which an unauthorized third party illegally accessed their system. Attackers downloaded confidential information from the system, including early development footage for the next grand theft auto. They launched the investigation and started notifying the affected customers.

Massive Rockstar Games Leak Reveals Canceled GTA 5 Content and Early GTA 6 Assets A 192GB archive of internal Rockstar Games development files has resurfaced online, exposing previously unseen details from the company’s 2022 data breach. The leaked material includes canceled expansions, cut missions, and early GTA 6 map assets, all traced back to the same intrusion by hacker Arion Kurtaj, a member of the Lapsus$ group. The files, which had circulated privately before spreading more widely in recent months, offer a deeper look into Rockstar’s shelved projects. Among the discoveries is evidence of a canceled *GTA 5* Liberty City expansion, with map data in the CodeWalker editor showing a potential version of the city larger than its GTA 4 counterpart, along with terrain-testing assets. The leak also contains remnants of the abandoned *Agent Trevor* single-player DLC, including a spaceship location, spacesuits, and an underground mansion area. Additionally, cut mission names and dialogue were found, including an earlier version of GTA 5’s Option A ending, where Trevor crashes into a liquid nitrogen tank, freezes, and shatters. While the archive includes early *GTA 6* map assets, sources describe them as low-resolution renders similar to those in Rockstar’s official teasers. The files originate from the 2022 breach, in which Kurtaj accessed Rockstar’s systems, leaked GTA 6 development footage, and threatened to release the game’s source code. The newly surfaced data provides further insight into Rockstar’s development process and the extent of the original hack.