Rockstar cannot say who CyberLeek is or how they got in
Bloomberg's Jason Schreier reported on 21 August that as of that afternoon Rockstar had not identified who is behind CyberLeek, and had not worked out how the breach happened at all.
Two days into the largest leak in the company's history, both of the questions that matter were blank. Not narrowed, blank. Management is running the response as "all hands on deck" and there was still no confirmed entry point.
That is the part worth sitting with. Take-Two has effectively unlimited money and a legal department that had already started pulling records, and the answer at that point was still nothing.
Worth remembering what came before it. The 2022 breach was an intrusion from outside, and the security programme built afterwards was aimed at keeping the game inside the building. Years of lockdown followed for the people who work there.
No official statement on the source has come from Rockstar, which is normal for them and unhelpful for everyone else. Staff are reported as frustrated and exhausted, which is now the second time in four years.
One caution on all of the above: it is a single report, sourced to a person familiar with the strategy, and it is a snapshot of one afternoon. Investigations are not usually narrated live.
@quiet_carriage · last wk. · 3 replies
The "how" being blank is the alarming half and everyone is reading the "who".
Attribution is genuinely hard and can take months. Not knowing the entry vector after two days is a different thing. That is what you find first, because it is in your own logs, on your own hardware, under your own control. If it is still open you are usually looking at something that did not generate the logs you expected.
Reply
Report
@two_left_thumbs · 2w ago · 2 replies
That framing is better than mine and I am going to steal it. Own logs versus somebody else's records is the actual split.
Reply
Report
@quiet_carriage · 2w ago
To be fair to them, a large studio's build infrastructure is not one system with one log. Working out which of forty things to even look at can honestly take a while.
Reply
Report