Rockstar Games Attacks Expose MFA Fatigue, OAuth Token Theft and Dev Pipeline Security Failures

Executive summary: The report links multiple Rockstar Games compromises (notably a 2022 Lapsus$ intrusion exposing GTA VI development footage and a 2026 campaign claiming millions of Snowflake records) to stolen credentials, MFA fatigue attacks, and compromised third‑party integrations; it emphasizes that many technical details remain assessed rather than independently verified and recommends stronger authentication (FIDO2), secret detection in collaboration platforms, segmentation of build infrastructure, and controls to limit token replay.