Rockstar Games has confirmed that a recent hacking incident resulted in the leak of company data, an event discovered when the hacking group ShinyHunters posted the files after their demands appeared to go unmet. According to the company, the breach involved a “limited amount of non-material company information” accessed through a third party, which it insists has no impact on the organization or its players. Despite Rockstar’s public dismissal, the leaked data offers a compelling and unprecedented glimpse into the financial underpinnings of its most successful online ventures.
Data Confirms GTA Online’s Dominance
The leaked files primarily contain financial and operational metrics. They offer a stark confirmation of Grand Theft Auto Online’s colossal, enduring popularity. A decade after the release of Grand Theft Auto 5, GTA Online maintains nearly 10 million weekly active users. By contrast, Red Dead Online averages only around 1 million weekly users, highlighting the distinct commercial trajectories of Rockstar’s two major online offerings.
Platform Breakdown and Revenue Insights
The data also reveals detailed platform-specific user counts. The PlayStation 5 version of GTA Online leads the platform distribution with approximately 3.5 million weekly active users. The PlayStation 4 and Xbox One iterations together contribute nearly another 3 million users. Furthermore, the financial metrics expose a significant revenue engine: Shark Cards and GTA+ Memberships collectively generate over $9.5 million weekly, with Shark Card purchases averaging close to $1 million daily. Geographically, United States players are the top spenders, followed by users in the United Kingdom and Germany.
Scope of the Leak
The leaked content appears to align with Rockstar’s initial characterization of the incident. The files reportedly do not contain source code for any titles or any leaks pertaining to the highly anticipated Grand Theft Auto 6. This focus solely on financial data suggests the breach’s primary impact will be informational rather than operational, though the exposure of internal metrics is a significant corporate event.
ShinyHunters’ Claims and Dark Web Release
The hacking group ShinyHunters initially claimed responsibility for the breach, demanding a response from Rockstar Games by April 14. After stating their demands were ignored, the group proceeded to release the data on the dark web, accompanied by a message denying involvement with a Telegram channel or any prior sale of the data on social media. The group claimed the compromise originated from Rockstar’s use of Snowflake instances via Anodot.com.
A Financial Snapshot of Online Success
For analysts and industry observers, this unauthorized data release provides a rare, verified snapshot of a major publisher’s online performance. The figures confirm GTA Online not only as a historical success but as a continuously thriving entity with a robust, revenue-generating user base. The disparity between GTA Online and Red Dead Online’s user numbers offers a clear case study in the challenges of replicating multiplayer success, even within the same development studio.
Regardless of Rockstar Games’ official stance on the materiality of the leaked information, the incident underscores the persistent threat of cybersecurity breaches in the gaming industry. While the absence of source code or GTA 6 details may limit immediate developmental risks, the exposure of sensitive financial and user data represents a reputational and strategic vulnerability. The data itself, now circulating on forums like Reddit and GTA Forums, provides an undeniable and fascinating ledger of the economic reality behind one of the industry’s most profitable ongoing projects.
