Alleged ShinyHunters Leader Arrested: The Rockstar Link
Dutch police announced on September 29 that they had arrested a 24-year-old man from Amsterdam in their investigation into ShinyHunters, the hacking and extortion group that in April claimed a breach of Rockstar Games data through a third-party vendor. The FBI describes him as one of the group’s alleged leaders. The police statement does not mention Rockstar, and neither do the FBI remarks quoted in coverage: the connection is the group, not this specific case.
What the authorities announced
According to the Dutch National Police, the man was arrested on September 15 on suspicion of playing a role in ShinyHunters and of taking part in a criminal organisation. Police say material found on his laptop also led to a separate suspicion of attempted incitement of two murders abroad. On September 29, a Rotterdam court ordered that he stay in pretrial detention for at least 90 more days. The statement cites earlier ShinyHunters breaches at the Dutch telecom operator Odido, Pornhub and Ticketmaster, while specifying that he was not arrested as part of the Odido investigation.
On the American side, FBI Cyber Division Assistant Director Brett Leatherman said the suspect and his co-conspirators allegedly breached more than 140 organisations since last year and collected at least 70 million dollars in extortion payments, as reported by CyberScoop and BleepingComputer. The FBI also urged remaining members of the group to come forward.
The authorities have not published the suspect’s name, and neither do we. He has not been convicted of anything.
The Rockstar link: the April breach
On April 11, 2026, ShinyHunters listed Rockstar Games on its leak site and set a payment deadline of April 14, Help Net Security reported. According to the same report and other security outlets, the attackers did not break into Rockstar directly. They went through Anodot, a third-party cloud analytics service, and used stolen authentication tokens to reach data Rockstar stored on Snowflake.
Rockstar confirmed the incident in a statement to Kotaku, saying that “a limited amount of non-material company information” had been accessed through a third-party breach, and that it had no impact on the company or its players. After the deadline, the group published a dataset it put at 8.1 GB, according to Security Affairs, and security outlets reported that it included internal analytics for GTA Online and Red Dead Online. Rockstar has not confirmed the contents, and we do not republish figures taken from stolen data.
| Status | |
|---|---|
| ShinyHunters claimed a Rockstar breach in April 2026 | Confirmed by Rockstar (third-party breach, limited data) |
| A 24-year-old ShinyHunters suspect was arrested on September 15 | Confirmed by Dutch police; the FBI calls him an alleged leader |
| The arrest concerns the Rockstar breach | Not stated by the police or in the FBI remarks reported |
| Player accounts were affected | Rockstar says no |
What this is not
This case has no stated connection to the GTA 6 gameplay clips that leaked in August. Those came from an account calling itself Cyberleek, and Take-Two responded with subpoenas to Microsoft and Discord, as our report on Rockstar’s response to the GTA 6 leaks details. ShinyHunters has not been publicly tied to those leaks by Rockstar, Take-Two or any authority.
It also changes nothing for the game. Grand Theft Auto VI is still dated November 19, 2026, on PlayStation 5 and Xbox Series X and S; our release date guide tracks every official statement on that. And for a clean summary of what Rockstar has actually confirmed about the game, as opposed to what has leaked, start with our GTA 6 hub guide.