- Hackers released stolen data early, ShinyHunters posted Rockstar’s internal metrics on the dark web on April 13 after the company reportedly refused to pay a ransom.
- Leak contains no GTA 6 secrets: The stolen files include financial data from GTA Online and Red Dead Online, but no source code, assets, or player information for Grand Theft Auto 6.
- Rockstar downplays the breach: The company confirmed the leak involved limited, non-material information and stated it will not affect its organization or its players.
The hacking group ShinyHunters has followed through on its threat, the group posted the data it stole from Rockstar Games onto the dark web on April 13, a full day before the original deadline. This move came after the Grand Theft Auto 6 developer reportedly refused to pay any ransom.
Rockstar’s reported refusal to pay follows this guidance, even as the hackers released the data early. This stand shows that the company values long-term security over a quick fix.
The Leaked Data Lacks Major GTA 6 Secrets
Early reports from people who have seen the files confirm the leak’s contents. The stolen data mostly includes metrics information about GTA Online and Red Dead Online. The files show how much money these games generate on a daily and weekly basis. The data also allegedly categorizes consumer spending by country.
However, there is no Grand Theft Auto 6 Source Code, including object files or player personal data – which could have potentially provided significant development issues to Rockstar Games, as well as provided large amounts of data of the gaming communities, as the hackers hoped for.
The hackers probably only accessed financial stats through the third-party provider, not Rockstar’s core internal computers. For fans waiting for GTA 6 news, this leak offers nothing new or exciting.
Rockstar Downplays the Breach’s Impact
Rockstar Games confirmed the data breach on April 11, shortly after news first broke. The company revealed that a limited amount of non-material company information had leaked. Rockstar insisted that the incident would have no impact on its organization or its players.
The company refused to provide any comment regarding the recent public release of the stolen data. Additionally, they tried to reduce the hackers’ bargaining power by refusing to pay them a ransom, this publicly minimized the impact of the hacker’s actions.
Rockstar has attempted to minimize the hackers’ leverage by refusing to pay the ransom and publicly downplaying the severity of the situation. But they are still publicly exposed to the release of sensitive internal financial information about how players spend money, this may allow competitors to analyze how much players are spending at this point. The company will continue to have eyes on the ShinyHunters for their next targets.
Security analysts state that paying ransom increases the risk of future compromise. CISA (Cybersecurity and Infrastructure Security Agency) gives many reasons not to pay ransom, it cannot guarantee anything and will further fund criminal activity if you do.
Also, most businesses which have previously paid ransom end up being targeted again by hackers, they will not typically get back 100% of their data that the attackers stole.
The consequences of ransomware attacks extend far beyond the gaming industry, a ransomware attack on a Romanian water agency affected over 1,000 systems, demonstrating that critical infrastructure organizations are also prime targets, and that the debate over whether to pay ransoms has life-or-death implications when essential services are disrupted.
A Hacker’s Taunt and a Warning for the Industry
ShinyHunters used a weakness in a third-party cloud server provider and metrics software to break into Rockstar’s systems. Instead of selling the information, ShinyHunters made it available for anyone to download from their dark web site.
They also sent a clear message to the game maker, asking how it felt to become the headline. The hackers used the data dump to clear up false reports. The group insists they don’t have a Telegram channel nor attempted the sale of this data for $200k via X (formerly Twitter). Following these revelations, they’ve additionally mocked the game developer publicly.
Therefore, this is a significant, clear example to all those in the gaming industry to make sure that they secure all access points for every third-party cloud vendor.
A single vulnerability in a metric tool may cause an enormous public breach, regardless of whether or not the stolen information includes the game’s crown jewel (source code). Every game company must immediately audit their third-party agreements and security checks.
