Hackers Steal Data from Over a Dozen Companies in Anodot Breach Starting April 4, 2026

broke into Anodot and stole authentication tokens used by customers to access cloud data.

The breach at Anodot began on April 4, 2026, when the company's data connectors stopped working. The incident prevented Anodot customers from accessing their cloud-stored data. TechCrunch reported that hackers stole data from at least a dozen companies following the breach at Anodot.

Anodot is owned by Glassbox. Hackers used the stolen tokens to access and steal customer data from cloud storage. Snowflake cut off Anodot customers from their cloud data after detecting unusual activity in some data stores.

was affected by the Anodot breach.

A limited amount of non-material company information was accessed in connection with a third-party data breach at Rockstar Games, said Murphy Siegel, Rockstar spokesperson. Rockstar Games was breached in 2022, when hackers stole and published an early trailer for Grand Theft Auto VI. The 2022 incident involved direct access to Rockstar's systems, separate from the current Anodot-related event.

hacking group threatened to release the stolen data if ransom demands were not met.

ShinyHunters is a group of largely English-speaking hackers. ShinyHunters use social engineering skills, such as impersonating IT help desk and support staff, to trick employees into granting access to accounts or systems. In the past year, ShinyHunters focused on companies including Anodot, Gainsight, and Salesloft.

The group's activities have targeted these firms through methods like the impersonation tactics described.