Last updated: 5 September 2026

GTA 6 "Cyberleek" Leak Explained

Starting August 18, 2026, a leaker or small group going by "Cyberleek" began posting Grand Theft Auto VI gameplay clips and an image of what's claimed to be the game's complete Leonida map. Take-Two Interactive responded within days by filing DMCA takedowns and, on August 20, federal court subpoenas against Microsoft and Discord seeking account records to identify who is behind the leak. Rockstar and Take-Two haven't publicly confirmed the footage is genuine, but the scale of that legal response is the strongest signal so far that it is. Here's what's actually confirmed, what's still just claimed, and why you shouldn't send anyone money over it.

01What Happened, and When

On August 18, 2026, gameplay clips showing Jason — one of GTA 6's two protagonists — playing basketball, driving, and interacting with police, along with an image claimed to be the game's full Leonida map, began circulating online under the name "Cyberleek." Over the following two days, more clips followed: car-theft choices, a surrender mechanic, taser and melee combat, flight/plane footage, and a previously unseen cutscene, along with a clip of Jason spelling out "LEEK" in bullet holes on an in-game wall.

This is a separate story from the mid-August GTA 6 gameplay claims attributed to YouTuber HipHopGamer around August 11, 2026, covered in our Jason & Lucia teamwork leak guide. That earlier story was verbal claims about mechanics with no footage attached. Cyberleek's leak is actual video and image files, which is a materially different — and so far more credible — kind of leak.

02Who Is Cyberleek?

Cyberleek is not an established public figure or known industry leaker — it's an alias for an individual or small group whose identity hasn't been established. Alongside the leaked material, Cyberleek published a manifesto criticizing industry practices like digital-only editions and live-service monetization, and said the leaks would continue until Rockstar and Take-Two issue a public apology and commit to changes.

Cyberleek has also reportedly claimed a connection to Arion Kurtaj, the UK teenager convicted over the September 2022 GTA 6 source-code and footage breach. That connection is unverified — it comes from Cyberleek's own claim, with no independent confirmation, so treat it as an assertion rather than fact.

03Has Rockstar Confirmed the Leak Is Real?

No official statement from Rockstar or Take-Two has confirmed the footage is genuine. What's confirmed is the response: Take-Two has issued DMCA takedown notices against reuploads on X, YouTube, TikTok, Reddit, Streamable, and Discord, and posts have visibly been disappearing after those strikes land. Cyberleek's original Discord server was also taken down, and the account reportedly resurfaced under different handles afterward.

The scale and speed of that takedown campaign is why most outlets covering the story treat the footage as very likely genuine — but that's press inference based on Rockstar's reaction, not an admission from the company itself. How Cyberleek obtained the material in the first place hasn't been explained by Rockstar or independently established, so don't treat any specific theory about that as confirmed.

Nothing about GTA 6's confirmed release date of November 19, 2026, or Rockstar's own "Extended Look" reveal that premiered on Netflix August 27, 2026, has changed because of the leak.

04The $CYBERLEEK Token — Treat It as a Scam

Alongside the leaks, Cyberleek promoted a cryptocurrency token called $CYBERLEEK on the Solana blockchain, riding the attention the leak generated. This has nothing to do with Rockstar, Take-Two, or GTA 6 itself. On August 27, 2026, the wallet that created the token collected over $200,000 in accumulated trading fees from its liquidity pool and cashed it out into other currencies spread across several wallets — one specific transaction has been estimated at around $270,000 — and the token's value dropped sharply afterward for anyone still holding it.

Stop Killing Games — the consumer-rights campaign whose stated goals (opposing digital-only editions, anti-consumer monetization) overlap with parts of Cyberleek's own manifesto — publicly disowned the group over it on August 19, 2026. The organization called the leak "destructive and helps no one" and told its community not to support or send money to the leakers, distancing a legitimate consumer-advocacy movement from an act it said risked damaging that movement's own credibility.

This is a good general rule any time a leak or viral moment gets attached to a crypto token: the token's existence tells you nothing about whether the leak is real, and it's a common pattern for scammers to attach themselves to genuine news cycles.

05Has Anyone Been Identified as Cyberleek?

Not officially. Take-Two's and Rockstar's subpoenas are aimed at getting Microsoft and Discord to hand over account records, not at naming a suspect themselves, and neither company has said whether that data has actually been received or reviewed.

Separately, amateur online investigators — most notably a GTAForums user compiling digital-forensic evidence — published a report around August 25, 2026 pointing to a specific Discord user as a likely match, based on the timing of that account's posts lining up closely with when Cyberleek's material first appeared. Even the investigator behind it describes the case as circumstantial rather than proven — "a huge leap" in the case, but "not concrete proof." No company or law enforcement agency has confirmed this identification, so treat it as an unverified community theory, not a resolved identity.