Get Your Free Report
Start for Free
SOCRadar® Cyber Intelligence Inc. | The GTA VI Leak by CyberLeek Explained
Aug 26, 2026
10 Mins Read
Aug 27, 2026
Moon
Summarize with:

The GTA VI Leak by CyberLeek Explained

GTA VI has been slipping out from behind Rockstar’s usually airtight walls in daily doses. An anonymous figure calling itself CyberLeek has been releasing gameplay clips, map images, and increasingly bold demands, turning what should have been a tightly controlled marketing rollout into one of the messiest leak sagas gaming has seen in years.

Here’s our breakdown of the GTA VI leak so far, organized around the questions people actually want answered.

What Happened With the GTA VI Leak?

The GTA VI leak refers to a wave of unreleased gameplay footage, screenshots, and map material from Grand Theft Auto VI that has been surfacing online since mid-August 2026. Instead of one large dump, the material is being drip-fed by an anonymous individual or group operating under the handle CyberLeek.

So far, the leaked clips have shown protagonist Jason Duval playing basketball, driving through the city, visiting a strip club, wandering into a nudist colony, and dying on-screen in what appears to be the game’s death screen. A leaked map, allegedly showing the entire in-game setting of Leonida, also circulated early on.

Every clip is watermarked and tied back to CyberLeek’s website and companion cryptocurrency token, which makes the situation feel less like a straightforward data breach and more like a drawn-out public campaign.

It is worth noting that this is not the first time GTA VI has leaked. The September 2022 GTA VI source code leak saw more than 90 videos and source code details stolen from Rockstar’s internal systems by a teenage hacker. CyberLeek is a separate, unrelated situation, four years later and considerably closer to the game’s actual release.

How Did the GTA VI Leak Start?

CyberLeek appears to have prepared the campaign before the first public footage appeared. Its website, backup domains, and Solana-based $CYBERLEEK token were reportedly set up around August 14 and 15.

The CyberLeek website

The CyberLeek website

The first public footage appeared on August 18, beginning with a short clip of Jason playing basketball outside a house already familiar from Rockstar’s official marketing. Another clip showing a roadside confrontation followed.

CyberLeek also published a manifesto framed around consumer-rights demands. The message called for an end to digital-only preorders, an end to downloadable content that is already present on the disc, and long-term access to single-player games after official support ends.

Commandments by CyberLeek

Commandments by CyberLeek

Skepticism appeared quickly, but Rockstar and Take-Two takedown activity made many observers treat at least some of the material as genuine. Public reporting also noted that one clip used a song released in January 2025, which weakened the idea that the footage was recycled from the older 2022 leak.

What’s the Timeline of the GTA VI Leak?

Since the first clips appeared, the leak has developed quickly:

August 18 Basketball and driving clips, CyberLeek’s manifesto, and alleged Leonida map images appear.
August 19 A taser clip and a clip nicknamed “Junkies” leak, both suggesting a fairly late-stage build. CyberLeek opens a token-gated poll letting $CYBERLEEK holders vote on the next release, and the real-life consumer campaign Stop Killing Games publicly distances itself from CyberLeek’s tactics the same day.
August 20 A plane clip becomes the turning point. It ends with the in-game character shooting the word “LEEK” into a wall, widely read as proof of hands-on access to a playable build rather than just stolen video files. Threats of story and ending spoilers follow.
August 21 Take-Two legal efforts reportedly target Microsoft and Discord for information connected to the leaks. A “Contact” page appears on CyberLeek’s site offering paid ad space on future leaks.
August 22 to 25 More gameplay clips circulate, including club, beach, nudist colony, and store scenes. A clip shows an in-game death screen and the first on-screen mention of second protagonist Lucia. Separately, fake “leaked” GTA VI download files, mostly empty space hiding a small piece of malware, start circulating on torrent sites.
August 26 Rockstar issues its first direct public statement addressing the situation.

CyberLeek has kept attention on the story by releasing small pieces of material over several days instead of publishing everything at once.

Is GTA VI Really Leaked?

Yes, the available evidence strongly suggests that at least some of the GTA VI material is genuine. Rockstar’s takedown activity, the appearance of newer in-game content, and the “LEEK” wall clip all point toward real gameplay material rather than a simple fake.

The clip that convinced most doubters: CyberLeek spelling 'LEEK' into a wall with in-game gunfire.

The clip that convinced most doubters: CyberLeek spelling ‘LEEK’ into a wall with in-game gunfire.

Still, “real” does not mean “complete.” Nothing in the public evidence proves that CyberLeek has the full game, the final build, the story ending, or unrestricted access to Rockstar systems. The material may come from a limited playable build, stolen footage, internal access, or another narrow source that has not been confirmed publicly.

Second protagonist Lucia has reportedly been referenced, but the leak has not produced a full story reveal or ending.

Who Is CyberLeek?

CyberLeek’s identity remains unknown. The persona the leaks as a consumer-rights protest rather than a simple grab for money or attention, built around three core demands: no more digital-only preorders, no more paywalling content that is already included in the base game as “DLC,” and a guarantee that single-player games stay playable even after official support ends.

That framing is complicated by the campaign’s financial elements. CyberLeek promoted a cryptocurrency token, used token-based voting to choose future clips, and reportedly offered paid advertising space around future leaks. Those choices make the campaign look partly ideological and partly promotional.

Take-Two’s legal team has reportedly sought information from Microsoft and Discord to identify accounts linked to the leaks. Microsoft’s Xbox CTO also publicly said the company was working with Take-Two and Rockstar to protect intellectual property.

Online investigators have circulated theories about CyberLeek’s identity, but no public attribution has been confirmed.

Has Rockstar Responded to the GTA VI Leak?

For about a week, Rockstar’s visible response was mostly legal and operational, including takedowns and Take-Two’s reported subpoenas. That changed on August 26, when Rockstar posted a statement calling the leaked footage “heartbreaking for our team” and apologizing for how long it has taken to share official details about the game.

Rockstar's first public statement on the leaks, posted August 26 – a day before its Netflix Extended Look.

Rockstar’s first public statement on the leaks, posted August 26 – a day before its Netflix Extended Look.

The statement also served as a lead-in to Rockstar’s Netflix-exclusive Extended Look, which was already scheduled to premiere the next day and give fans their first sanctioned, in-depth look at GTA VI gameplay. Rockstar reiterated that the game’s release date, November 19, 2026, on PS5 and Xbox Series X|S, is unchanged.

Behind the scenes, the hunt for CyberLeek has reportedly become more personal than subpoenas alone. A Reddit user who had publicly guessed the exact date the leaks would start a month beforehand says a lawyer and investigators representing Rockstar came to his home asking about any connection to CyberLeek. That claim has been reported by a handful of outlets but has not been confirmed by Rockstar itself.

A separate, widely shared claim that Rockstar hired former Pentagon officers to track down the leaker is not accurate.

The real investigative push has still drawn some pushback online, with parts of the community arguing that energy spent chasing a leaker would be better spent elsewhere, and others criticizing fellow fans for helping a major publisher hunt someone down.

What Cyber Risks Are Linked to the GTA VI Leak?

Unfortunately, this is the part that puts ordinary fans at risk. Once a real leak gets enough attention, opportunists tend to show up quickly, and the GTA VI leak has been no exception.

A handful of scam patterns have already been documented:

  • Fake full builds: Multi-gigabyte files claiming to be the complete game have circulated on torrent sites. Researchers who examined one found it was almost entirely blank padding hiding a tiny piece of malware capable of disabling Windows security software.
  • Fake preview and demo sites: Websites impersonating Rockstar, for the official Extended Look, or offering a “GTA VI demo,” have been caught pushing infostealer malware designed to quietly harvest saved passwords and browser session data.

SOCRadar Phishing Radar results for Rockstar Games (Free SOC Tools)

SOCRadar Phishing Radar results for Rockstar Games (Free SOC Tools)

  • Impersonator accounts: Telegram and Discord channels have appeared using the CyberLeek name to promise a downloadable “playable build,” something the real CyberLeek has never actually distributed, only video clips and images.

Telegram channels are impersonating CyberLeek to push a fake downloadable GTA VI build. (X)

Telegram channels are impersonating CyberLeek to push a fake downloadable GTA VI build. (X)

Keep in mind: there is no legitimate public GTA VI download or playable demo right now. Any site, torrent, channel, or file claiming otherwise should be treated as malicious by default.

What Happens Next for GTA VI?

The legal side is still developing, and CyberLeek’s identity remains unconfirmed. Microsoft and Discord have reportedly been drawn into Take-Two’s efforts to identify accounts linked to the leaks.

The marketing side is also shifting. Rockstar’s official Extended Look gives fans a sanctioned view of the game, which may reduce some of the attention CyberLeek gains from small daily leaks. However, CyberLeek has said it will not stop until it gets a public apology. Expect this story to keep moving right up to launch.

CyberLeek's own 'final statement,' demanding a public apology from Rockstar before the leaks stop.

CyberLeek’s own ‘final statement,’ demanding a public apology from Rockstar before the leaks stop.

Conclusion

The GTA VI leak says less about the shock value of the footage and more about the unusual dynamic around the game’s rollout. Rockstar has spent years revealing very little, while fans have been eager for almost any official look at the game. That gap helped make even short clips, map images, and small gameplay details feel bigger than they normally would.

CyberLeek’s “protest” framing is a little hard to take fully at face value once you factor in the memecoin, token-gated voting, and paid ad space. Still, the strategy clearly worked in the sense that it forced Rockstar’s hand faster than any fan petition could have.

For most people following along, the bigger risk is the wave of fake “builds,” demo sites, and phishing pages spreading because of the leak. Enjoy the clips if you’re after spoilers, but don’t go looking for a download.