Rockstar Games ignores hackers and ShinyHunters group threatens to publicly disclose stolen GTA 6 data

The hacker group ShinyHunters stated that it will release data stolen from Rockstar Games games, including the highly anticipated GTA 6. The decision comes after the developer did not give in to ransom demands, treating the invasion as an event with limited impact. The release of information is promised for next Tuesday, April 14th.

The invasion of Rockstar Games’s servers was successful last weekend, with criminals stealing a variety of information. The company’s stance, which acknowledged the attack but minimized its consequences, angered hackers. Segundo reports from the BBC, ShinyHunters confirmed that their demands were not met and, therefore, they intend to make the material obtained public.

Rockstar responds and hackers announce disclosure

Rockstar Games, after being hacked and having confidential data stolen, confirmed the cyber incident. The company, however, assessed the case as a situation of limited impact, without revealing details about the extent of the damage or the information compromised. Esta assessment was decisive for the hackers’ response. Diante of the developer’s refusal to meet its ransom demands, ShinyHunters decided to follow through on the threat to release the stolen content. The gaming community and the technology industry await the developments with anticipation and concern, as the release could expose unprecedented and potentially sensitive details about the development of GTA 6 and other confidential studio projects. The decision of Rockstar reflects the guidance of cybersecurity authorities, who advise companies not to negotiate with criminals, in order to avoid financing new illegal activities and not guaranteeing the return of data.

Exploited loopholes and coveted data

ShinyHunters criminals have not publicly detailed the exact methods used to break into Rockstar Games’s systems. However, the group has claimed to have exploited vulnerabilities in cloud environments and data monitoring platforms. The information indicates that the invasion occurred through a combination of failures in third-party systems that Rockstar uses in its operations.

• Failure in environment Snowflake, a cloud data storage platform, widely used by several companies.
• Vulnerabilities in platform Anodot, a data monitoring tool that operates in the cloud.
• The group promises that the release of the stolen material, scheduled for April 14, will bring more clarity about the type of content obtained. However, it is already known that hackers claim to have GTA 6 data, although they have not specified the exact volume or nature of this information. Detalhes about other internal projects at Rockstar Games would also be among the stolen files.
  

Impact of non-negotiation and next steps

Rockstar Games’s decision not to give in to hackers’ blackmail is in line with recommendations from cybersecurity experts and government agencies. Estas guidelines advise against paying ransoms, arguing that such a practice does not guarantee data recovery and, more importantly, encourages and finances future criminal activities. Embora refusal to pay the ransom minimizes the flow of money for cybercrime, it may also result in the disclosure of stolen material, as threatened by ShinyHunters. The leak of information about GTA 6 could have significant implications for Rockstar, from the premature revelation of plot and gameplay elements to the exposure of source codes and development data. The next few weeks will be crucial for the company and for fans, who are waiting to see what will actually be shared online and what the real impact will be on the game’s launch strategy.

Retrospective: other GTA 6 leaks

The current incident with the ShinyHunters group is not the first large-scale leak to hit the development of GTA 6. In 2022, the game was the target of a massive information leak, one of the largest in the history of the video game industry. Naquela occasion, the person responsible was the young man Arion Kurtaj, who had links with the notorious group Lapsus$. Kurtaj was able to hack into Rockstar Games’s systems and access a vast amount of confidential material, including promotional videos and segments of the game’s source code.

The 2022 attack demonstrated the vulnerability of large corporations to individuals with specific cybersecurity knowledge and unconventional methods. Arion Kurtaj used simple tools such as a smartphone and a Fire TV Stick device to penetrate the company’s defenses. Ele gained access to Rockstar’s internal communication system, Slack, and from there obtained the sensitive data. The 2022 incident resulted in his conviction and reinforced the need for strict security measures in companies dealing with high-value intellectual property. The repeat attack, this time with ShinyHunters, highlights the constant threat of cyberattacks on Rockstar and other major developers, highlighting the complexity of protecting valuable digital assets in an ever-evolving threat landscape.