Rockstar Games, the studio behind the highly anticipated GTA 6, is reportedly facing a serious cybersecurity incident after hacker group ShinyHunters claimed responsibility for breaching its cloud-based systems. According to reports circulating online, the group alleges it gained unauthorized access to Rockstar’s secured cloud infrastructure and is now in possession of a large volume of internal company data.
The hackers have reportedly issued a ransom demand, giving Rockstar Games until April 14, 2026, to respond or risk a public data leak. The group has not clarified exactly what files or systems were accessed but claims the stolen material includes sensitive corporate information.
In an update shared on April 11, Rockstar Games acknowledged the incident, stating that a “limited amount of non-material company information” was accessed through a third-party data breach. The company emphasized that the breach has no impact on its operations or on player data, suggesting that customer accounts and gaming services remain secure.
Initial reports indicate that the intrusion may not have directly compromised Rockstar’s core systems. Instead, attackers allegedly exploited a vulnerability linked to a third-party cloud monitoring service, which may have provided indirect access to Rockstar-related data stored on cloud platforms.
ShinyHunters, a well-known cybercriminal group active since 2020, has previously targeted major corporations including Microsoft, Cisco, AT&T, and Ticketmaster. The group is known for data theft and extortion tactics, often threatening to release stolen information unless ransom demands are met.
Although the exact contents of the alleged breach remain unknown, cybersecurity analysts suggest the stolen data could include internal documents such as business plans, financial records, or marketing strategies rather than player passwords or personal user data.
Rockstar Games has previously experienced a major leak in 2022, when early GTA 6 development footage surfaced online following a separate cyber intrusion. That incident led to significant industry attention and legal action.
As of now, the situation remains under investigation, with no confirmation of what data, if any, may be released.

