FEDERALHackingTechnologyInformationData ExfiltratedTargetedIP / systemLowResolved

ROCKSTAR GAMES, INC.

bd_e4d6dce6760450a0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 1, 2022

Filed

May 22, 2024

To disclose

21 months

Affected

Not disclosed

Confidence

74%

Full breach record for ROCKSTAR GAMES, INC. →2 incidents on file

In September 2022, an unauthorized third party illegally accessed and downloaded confidential information from Rockstar Games' systems, including early development footage for the next Grand Theft Auto. Separately in September 2022, an unauthorized party accessed credentials for a vendor platform used by 2K Games for help desk support and sent a malicious link to certain players. The company described related costs as immaterial.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 months / 629 days

Sep 1, 2022

Begins

Sep 1, 2022

Discovered

May 22, 2024

Filed

vs. sector median

+71 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.No incident reportedView incident

Name: Take-Two Interactive Software, Inc.
norm: take two interactive software

Name: ROCKSTAR GAMES, INC.
norm: rockstar games
Domain: rockstargames.com
Also named: Take-Two Interactive Software, Inc.operating subsidiary ofholding company
Industry: Technologyllm

Discovered: Sep 1, 2022
Breach occurred: Sep 1, 2022 – Sep 30, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IP / system
Attack vector: Unauthorized Access
MITRE ATT&CK: T1530 Data from Cloud Storage ObjectT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Incurred certain immaterial incremental one-time costs related to consultants, experts and data recovery efforts
Changes made: Expect to incur additional costs related to cybersecurity protections in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 months(629 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/946581/000162828024024623/ttwo-20240331.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: May 22, 2024
Raw hash: 801441684b2debc555f809f35c96a8bbc7580267f0b462da2370f3eddce7bd90

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.7 MB

Download View at source

Reporting entityTake-Two Interactive Software, Inc.

Victim entityROCKSTAR GAMES, INC.

Incidentdiscovered Sep 1, 2022

Stated responseIncurred certain immaterial incremental one-time costs related to consultants, experts and data recovery efforts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing