Few gaming stories reveal how leaks actually work better than Grand Theft Auto VI. On 18 September 2022, a hacker posting as "teapotuberhacker" uploaded 90 videos of unfinished GTA 6 footage to the GTAForums message board, and within a day Rockstar Games confirmed the material was genuine. Four years later, in August 2026, a group calling itself CyberLeak was leaking the game's map and what appeared to be playable-build footage. The GTA 6 leaks are the clearest real-world case study of how video game leaks happen, why people leak them, and what a single breach costs a studio.
How Video Game Leaks Actually Happen
Game leaks rarely come from one source. They generally fall into four categories. The first is the insider leak, where an employee, contractor, or former staff member shares confidential material, whether by accident or on purpose. Rockstar itself fired 34 employees in October 2025 for what it described as "public discussion and distribution of confidential information," which shows how often the threat originates inside the studio.
The second is an external hack. In the 2022 GTA 6 breach, the attacker did not crack encryption from scratch. The hacker claimed to have pulled files directly from Rockstar's internal Slack workspace, a classic social-engineering attack in which an attacker convinces or tricks an authorised person into granting access rather than breaking through technical defences. Third is accidental exposure, such as unfinished footage slipping into a developer's public demo reel or a development kit being photographed on a desk. Fourth is supply-chain and third-party access, where a leak originates with a partner studio, a marketing agency, or a retail listing instead of the developer itself.
Inside the 2022 GTA 6 Breach: How a Teenager Got In
The most consequential GTA 6 leak began on 18 September 2022, when "teapotuberhacker" published 90 videos containing roughly 50 minutes of work-in-progress footage. Bloomberg journalist Jason Schreier confirmed with sources at Rockstar that the clips were authentic, and The Guardian reported the footage came from several stages of development. The videos revealed a modern-day Vice City setting, early animation and gameplay tests, level layouts, and the two protagonists later confirmed as Lucia and Jason.
The attacker said they had downloaded the files directly from Rockstar's internal Slack groups and threatened to release source code, assets, and internal builds of both GTA V and GTA VI. They also claimed responsibility for a breach at Uber the week before, and Uber linked the activity to Lapsus$, the hacking group tied to attacks on Microsoft, Nvidia, and Samsung. Rockstar confirmed on 19 September that the leak was a "network intrusion" but said it did not anticipate long-term effects on development. Take-Two Interactive, Rockstar's parent company, saw its share price drop more than 6% in pre-market trading before recovering.
The person behind the breach turned out to be a 17-year-old from Oxfordshire, a key Lapsus$ member later identified as Arion Kurtaj. While on bail for hacking EE and Nvidia — and under police protection at a Travelodge hotel — he breached Rockstar using a mobile phone, a television, and an Amazon Fire TV Stick, then threatened to publish the source code in a Slack message sent to all Rockstar staff. In December 2023, after a jury found he had committed the acts (he was deemed unfit to stand trial because of his autism), a judge placed him under an indefinite hospital order, describing him as a high risk to the public.
Why Do People Leak Games? The Motivations
Leakers are not all the same. Some want money or leverage: "teapotuberhacker" wrote that they were "looking to negotiate a deal" with Rockstar or Take-Two. Others chase recognition, treating a major leak as proof of skill within hacking communities. Insiders sometimes leak out of frustration over working conditions, pay, or creative decisions. And some leaks are political: the 2026 CyberLeak group said it released GTA 6 material to protest Rockstar's decision to lock content behind the special edition and to ship physical copies without discs. That aligns the group with the Stop Killing Games movement, which opposes publishers making games disposable or unplayable. Notably, some journalists warned the CyberLeak demands could also be a cryptocurrency scam or a publicity stunt — a reminder that not every leak is what it claims to be.
What a Leak Really Costs a Studio
Leaks are expensive and disruptive even when they do not stop a game from shipping. Rockstar said the 2022 breach alone cost the company $5 million and thousands of staff hours to contain and recover from. Beyond money, a leak can damage morale, force teams to lock down the flexible remote work they depend on, and mislead the public, since early footage is not representative of the final product. Journalists noted that some viewers wrongly criticised the leaked GTA 6 footage for its graphics, not realising that art and polish are finalised late in development. In response to repeated leaks, Rockstar chose to ship the physical edition of GTA 6 with download codes instead of discs, a move tied by both the company's own framing and journalists to preventing leaks and reselling.
The 2026 CyberLeak Protest: A New Kind of Leak
The most recent chapter came in August 2026, when the group CyberLeak leaked the in-game map and several minutes of GTA 6 footage. Unlike the 2022 hack, which appeared motivated by negotiation and notoriety, CyberLeak framed its leak as a protest against Rockstar's special-edition-only content and its no-disc physical release, and threatened to publish more unless release plans changed. Later footage showed the word "leek" spelled out in bullet holes, which journalists took as evidence that the group had a playable build of the game. The incident highlights how leaks have evolved from simple theft into a form of protest and leverage that developers now have to plan for.
What Happens Next for GTA 6
GTA 6 is scheduled to launch on 19 November 2026 after multiple delays, and Rockstar has hardened its security at every stage, from internal communications to physical distribution. Security researchers and industry analysts expect studios to keep tightening access controls, monitoring insider activity, and treating leaks as an inevitable risk rather than a surprise. For players, the lesson is practical: avoid clicking on "leaked" downloads and early-access offers, because scammers have repeatedly used GTA 6 anticipation to spread malware and fraud.
Key Takeaways
- Game leaks happen through insiders, social-engineering hacks, accidental exposure, and third-party access — not just brute-force hacking.
- The 2022 GTA 6 leak came from Slack access by a Lapsus$ member who was arrested and later given an indefinite hospital order.
- Rockstar says the 2022 breach cost $5 million and thousands of staff hours.
- Leakers are motivated by money, notoriety, frustration, and increasingly by protest, as the 2026 CyberLeak leak showed.
- Repeated leaks pushed Rockstar toward disc-less physical copies and stricter internal security.
