Rockstar Games has confirmed it was hit by a third-party data breach—and now the hacking group ShinyHunters has reportedly dumped the stolen files publicly after Rockstar refused to meet its demands. Early scrutiny suggests the leak is heavy on financial and metrics data tied to GTA Online and Red Dead Online, and light on the kind of blockbuster Grand Theft Auto VI material fans (and doomscrollers) were bracing for.
This matters for two reasons: it’s another high-profile security incident for one of the industry’s most important studios, and the numbers being circulated paint an unusually detailed picture of just how much money GTA Online still prints in 2026—across platforms, regions, and spending behavior.
What Happened: ShinyHunters Publishes Data After Rockstar Won’t Pay
Over the weekend, ShinyHunters claimed it had breached Rockstar and attempted to pressure the company with a ransom demand tied to an April 14 deadline. Rockstar acknowledged the incident, stressing it was limited in scope and not a threat to players or operations.
Rockstar’s statement was blunt and consistent across coverage: “We can confirm that a limited amount of non-material company information was accessed in connection with a third-party data breach. This incident has no impact on our organization or our players.”
Despite that, ShinyHunters has now released the data publicly ahead of the deadline. The group posted a message alongside the leak claiming Rockstar’s Snowflake instances were compromised “thanks to Anodot.com,” and also denying rumors that the data was being sold via Telegram for $200,000—insisting it was never for sale and is now simply “leaked.”
The key takeaway here isn’t the hackers’ taunting—it’s the vector: this is being framed as a third-party SaaS/metrics pipeline breach, not someone rummaging through dev builds on internal machines. That distinction goes a long way toward explaining why the leak (so far) looks like analytics and revenue telemetry rather than game assets.
What’s In the Leak: GTA Online Revenue, Platform Breakdowns, and “Whale” Spending
People combing through the files (and the stats being reposted from them) say the leak is largely financial-related metrics—including revenue, “bookings,” active user counts, and geographic spending patterns for Rockstar’s online games.
The headline-grabbing figure: leaked data circulating online indicates GTA Online has allegedly been pulling in around $1.3 million per day over a recent six-month period, and roughly $9.6 million per week on average (with higher peaks). The same dataset suggests Red Dead Online is dramatically smaller by comparison, with an average weekly revenue figure around $507,193.
A widely shared platform snapshot attributed to the leaked metrics breaks down weekly active users and weekly bookings for GTA Online like this:
- PS5: 3,474,021 weekly active users; $4,486,346 weekly bookings
- PS4: 1,889,729 weekly active users; $973,308 weekly bookings
- Xbox Series X|S: 1,129,023 weekly active users; $1,867,947 weekly bookings
- Xbox One: 1,026,695 weekly active users; $918,373 weekly bookings
- PC: 894,621 weekly active users; $264,273 weekly bookings
If those numbers hold up, the most striking angle isn’t just that PlayStation 5 leads—it’s how comparatively small the PC slice appears in both engagement and monetization. That’s a spicy data point in the broader conversation about Rockstar’s platform priorities, especially with GTA 6 looming.
The leak also appears to reinforce the modern live-service reality that a small fraction of players drive a huge share of revenue. Data being circulated from the files suggests around 4% of GTA Online players are responsible for monetized spending in the observed period—classic “whale economy” dynamics, now allegedly visible in Rockstar’s own internal metrics.
On top of that, the leaked material reportedly includes country-by-country spending patterns, with the United States leading GTA spending, followed by the UK and Germany.
One more figure making the rounds: leaked data suggests Rockstar made over $5 billion from Shark Card sales between 2014 and 2024. Separately, another summary of the leak claims Shark Cards and GTA+ memberships combine for over $9.5 million weekly, with Shark Cards averaging close to $1 million a day.
Rockstar has not publicly verified these specific figures. But multiple reports indicate that people who have viewed the leaked files say the publicly shared numbers match what’s inside.
What This Means for Rockstar—and Why GTA 6 Fans Should Temper Expectations
Let’s be clear: a leak of internal financial and engagement metrics is still serious. It can expose strategy, platform performance, and business assumptions—exactly the kind of information companies guard because it shapes negotiations, marketing, and long-term planning.
But it’s also not the nightmare scenario many feared. Early checks indicate the leak does not include GTA 6 source code, assets, or player data, and Rockstar’s own “non-material” framing appears consistent with what’s surfaced so far.
That’s important because the industry has seen what a truly damaging Rockstar leak looks like. In 2022, Rockstar suffered a major GTA 6 leak involving dozens of in-development clips, and the fallout was significant enough that Rockstar later cited $5 million in damages plus thousands of hours of staff time. In 2023, Rockstar also released the first GTA 6 trailer early after it leaked ahead of schedule.
This time, the story is less “GTA 6 spoilers” and more “GTA Online is still a money furnace.” And honestly? That’s still a big deal—because it underscores why Take-Two and Rockstar treat GTA Online as the gravitational center of their universe.
It also adds context to a long-running tension in the community: Red Dead Online has passionate fans, but the leaked metrics being circulated make it painfully easy to see why Rockstar shifted focus. If GTA Online is allegedly generating around $10 million a week while Red Dead Online sits closer to half a million, the business incentive is brutally obvious.
One practical note: multiple warnings have been raised about downloading leaked files. Beyond the ethical and legal issues, there’s always a real risk of malware or poisoned downloads when data is distributed through dark web links.
What Remains Unknown
- Exactly what files were accessed and the full scope of the dataset—Rockstar has only described it as “limited” and “non-material.”
- Whether the leak includes anything beyond GTA Online/Red Dead Online metrics, such as marketing timelines or contract details that have been speculated about elsewhere.
- How the breach unfolded technically, beyond ShinyHunters’ claim that it involved Snowflake instances and Anodot.
- Whether ShinyHunters still holds additional unreleased data or if this dump is the entirety of what was taken.
- Any further official response from Rockstar—after the data release, Rockstar declined to comment in at least one report.
