ShinyHunters Hack Anodot, Steal Data From Rockstar Games and Dozen Others

Hackers from the ShinyHunters group breached Anodot and stole authentication tokens.

“Rockstar Games has suffered a data breach linked to a recent security incident at Anodot, with the ShinyHunters extortion gang now leaking the stolen data on its data leak site”

BleepingComputer

Snowflake cut off Anodot customers after detecting unusual activity.

BleepingComputer

ShinyHunters threatened to release stolen data if ransom demands were not met.

Rockstar confirmed a limited amount of non-material company information was accessed.

ShinyHunters began leaking what they claimed was Rockstar Games data containing more than 78.6 million records.

The data allegedly included in-game revenue and purchase metrics, player behavior tracking, and game economy data.

HotHardware

The group issued a ransom demand with a deadline of April 14.

Rockstar maintained the incident had no impact on players or operations.

The breach highlighted the risks posed by third-party integrations.

“Hackers have reportedly stolen data from at least a dozen companies following a breach at business monitoring software maker Anodot, leaving its customers exposed to extortion and at risk of having their data published online”

TechCrunch

ShinyHunters exploited Anodot's breach to gain legitimate-seeming access to Rockstar's Snowflake environment.

The incident raised questions about how trusting companies are with third-party tools.