The ShinyHunters extortion gang leaked over 78.6 million Rockstar Games analytics records, including in-game revenue, player behavior, and customer support data. The data was stolen from Snowflake environments using authentication tokens compromised during a security incident at Anodot, a third-party SaaS integrator.
Initial Access
Anodot Token Theft
confirmed
Anodot, a data anomaly detection company and SaaS integrator, suffered a security incident where authentication tokens were stolen by threat actors.
Defender cut points
Implement robust security for third-party integrations, including regular security audits and token rotation policies.Enforce multi-factor authentication for all access to third-party services.