Nine days before Rockstar's own official Netflix reveal, an anonymous figure calling themselves Cyberleek posted what appeared to be genuine GTA 6 gameplay footage and a complete map of Leonida — kicking off the single biggest unauthorized information event in the game's development history, and a search term that grew more than 60-130% across its various spellings in the days that followed.
Here's what's actually known about Cyberleek, separated from the speculation that's grown up around the name — see our broader roundup of every GTA 6 leak, real and fake, for the fuller picture beyond just this one leaker.
The leak itself, and when it started
Cyberleek's leaking activity began August 18, 2026. According to reporting from multiple outlets tracking the story — including Bloomberg's Jason Schreier, whose confirmation carries real weight given his consistent track record on Rockstar-related reporting — the material released was genuine, not fabricated: gameplay clips and what appears to be GTA 6's complete Leonida map. Rockstar has been actively issuing takedown notices against the leaked content since it surfaced.
The leaking didn't stop after the initial drop. As recently as August 26, 2026 — the day before Rockstar's own Extended Look reveal — Cyberleek posted a 4-minute-38-second clip appearing to show GTA 6's opening prologue sequence, centered on Lucia Caminos inside Leonida Penitentiary. Notably, that footage lines up closely with what Rockstar's own official "Only in Leonida" character page had already confirmed about Lucia's backstory — a real prison release forming the start of her story — which is part of why the leak has been treated as credible rather than dismissed as fabrication.
What Cyberleek says their motive is
According to the leaker's own stated framing, the leaks are a form of protest against the gaming industry's shift toward all-digital, pre-sold releases — specifically citing Rockstar's own digital pre-order model for GTA 6 as a target. That's a genuinely unusual motive for a leak of this scale; most historical high-profile game leaks (including GTA 6's own 2022 development-footage leak) have been framed around notoriety, financial extortion, or simple opportunism rather than an explicit industry-practice protest.
How much of that stated motive to take at face value is a fair question. Leakers' publicly stated reasons don't always match their actual incentive structure — and in Cyberleek's case, there's a direct financial angle sitting alongside the stated protest: watermarks on the leaked footage carry the branding for a memecoin called $CYBERLEEK, tied directly to the leaker's own persona. That detail complicates any "pure protest" framing considerably, since it points toward the leaks also functioning as promotion for a speculative cryptocurrency asset bearing the leaker's name.
The wall message that made this leak distinctive
One detail set this leak apart from typical footage dumps: in one clip, the leaker recorded themselves in-game spelling out the word "LEEK" on a wall by shooting bullets into it — a deliberate, personalized signature embedded directly into the leaked gameplay itself, rather than just a watermark or file metadata. It's a small detail, but a telling one: it shows Cyberleek actively playing a full, functional build of the unreleased game, not simply distributing files obtained through a data breach without ever running them.
Is Cyberleek connected to any known group or individual?
As of this writing, no outlet tracking the story has identified Cyberleek's real identity, confirmed an arrest, or tied the handle definitively to a known hacking group. One adjacent detail worth noting: "Stop Killing Games," an unrelated international consumer campaign focused on game preservation and publishers' rights to shut down live-service games, has publicly distanced itself from Cyberleek and its tactics — suggesting some confusion or attempted association between the two that the actual Stop Killing Games campaign wanted to shut down quickly, likely because Cyberleek's leak-and-crypto-promotion approach doesn't reflect that campaign's actual advocacy goals.
There had also been unconfirmed rumors circulating that Cyberleek had been "caught" or stopped — rumors that were directly contradicted by the continued August 26 leak activity, which effectively ended that speculation. Whoever is behind the handle was still actively leaking material the day before Rockstar's own official reveal.
How this differs from GTA 6's 2022 leak
It's worth distinguishing Cyberleek clearly from the game's other major leak. The September 2022 leak — 90 development-footage clips posted to GTAForums, tied to a teenage hacker later identified as Arion Kurtaj — happened more than three years before Cyberleek's activity and came from a completely different source, method, and stage of the game's development. The 2022 material showed early, rough in-development footage; Cyberleek's 2026 material shows what appears to be a much more complete, near-final build, closer to the actual shipping product. Treating these as one continuous story, or assuming Cyberleek is somehow connected to the 2022 breach, isn't supported by anything currently reported.
Why this matters beyond the leak itself
Cyberleek's activity landing just nine days before Rockstar's own planned reveal raises an obvious question the studio itself hasn't publicly addressed: whether the timing was coincidental, or whether Rockstar's own reveal schedule was influenced by the leak actively circulating in the days beforehand. Companies facing active leaks have historically sometimes moved up planned announcements specifically to regain control of the narrative before leaked material does it for them — though there's no confirmed statement from Rockstar establishing that's what happened here, and the Extended Look's Netflix partnership had almost certainly been in planning for far longer than nine days, making a reactive schedule change less likely than it might first appear.
What happened to the last person who leaked GTA 6 at this scale
It's worth knowing what actually happened to Arion Kurtaj, the teenager behind the September 2022 development-footage leak, since it's the clearest available precedent for how seriously this kind of leak gets treated legally. Kurtaj, then 18 and from Oxford, England, was found to have stolen 90 clips and source code from Rockstar's servers, and reportedly threatened to release everything if the company didn't contact him directly within 24 hours. Deemed unfit to stand trial, he was sentenced in December 2023 to an indefinite hospital order rather than a fixed prison term — a UK legal mechanism used when a defendant's mental state is a central factor, keeping him in a secure hospital until doctors assess him as no longer a risk. Court proceedings noted a mental health assessment finding he still expressed intent "to return to cyber-crime as soon as possible," along with reports of violent incidents while in custody. (TechRadar)
In July 2026, Kurtaj was moved from the secure hospital to prison ahead of a scheduled retrial — set for November 2026, the same month GTA 6 itself is due to launch. (gHacks) That timing is a genuinely strange coincidence worth sitting with: the legal aftermath of GTA 6's first major leak is set to play out in court in the exact same month the game the leak exposed finally reaches players.
What that history means for Cyberleek specifically is unclear — different jurisdiction, different method, different scale of material, and (as of this writing) no confirmed identity to prosecute at all. But it's a real data point against treating leaking a major unreleased game as a low-consequence act: the last person confirmed to have done something comparable to GTA 6 spent years in a secure hospital and is now facing a retrial as the game itself finally ships.
Should you go looking for the leaked footage?
Worth saying plainly: the leaked material remains Rockstar's unreleased intellectual property regardless of who obtained it or why, and Rockstar has been actively working to remove it from circulation. Beyond the legal and ethical considerations, there's a practical one too — a meaningful amount of content claiming to be "more Cyberleek footage" circulating since the initial leak has been confirmed as AI-generated fabrication riding the real leak's coattails, some of it used for phishing. Reading reporting about what Cyberleek released, from established outlets that have verified the material, carries none of those risks; seeking out the actual files does.
The bottom line
Cyberleek is a real, still-active, unidentified leaker who obtained and has been distributing what independent reporting confirms is genuine GTA 6 material — gameplay footage, the Leonida map, and a Lucia-focused prologue clip — in the days immediately before Rockstar's own official reveal. Their stated motive is protest against digital-only game releases; their branding includes a memecoin, which complicates that framing considerably. No identity, arrest, or group affiliation has been confirmed. What's certain is that Cyberleek forced Rockstar into a defensive, takedown-driven posture in the final stretch before the studio's biggest planned reveal in years — an unusual, high-stakes collision between an unauthorized leak and a carefully planned marketing campaign, playing out in real time.
