GTA 6 Leak Spree Continues as Take-Two Subpoenas X To Identify CyberLeek

CyberLeek

Grand Theft Auto VI is facing another wave of unauthorised gameplay footage just days before Rockstar Games’ official extended preview, and publisher Take-Two Interactive is escalating its legal response. A ninth alleged gameplay video linked to the “CyberLeek” persona surfaced online on August 24, extending a leak campaign that has continued for six days. At the same time, Take-Two has expanded its efforts to identify the people behind the material by seeking records from X after already pursuing information from Microsoft and Discord.

The latest footage reportedly shows Jason Duval driving to a gas station, causing chaos and stealing a pickup truck. It also contains another brief cutscene that appeared in earlier leaked footage.

The leaks are arriving at an awkward moment for Rockstar. Netflix is scheduled to premiere “Grand Theft Auto VI: An Extended Look” on August 27, while the full game remains scheduled to launch on PlayStation 5 and Xbox Series X|S on November 19, 2026.

What is in the latest GTA 6 leaked video?

The newest alleged clip is centered on Jason, one of GTA VI’s two protagonists.

According to the published report, Jason drives to a gas station, gets involved in a confrontation and steals a pickup truck from a conspiracy theorist. The footage reportedly ends with another fragment of a cinematic sequence that had already appeared in an earlier leak.

That detail matters because the recent videos are not limited to isolated environmental shots or short technical demonstrations.

Several clips reportedly show substantial gameplay, including driving and other interactions, while others contain story-related scenes. The recurrence of cutscenes has increased speculation that whoever is behind the campaign may have access to a relatively complete development build rather than a handful of disconnected files.

There is no independent confirmation of exactly how the material was obtained.

Who is CyberLeek?

“CyberLeek” is the name or online persona attached to the latest wave of alleged GTA VI leaks.

The leaked clips reportedly carry CyberLeek watermarks and have been accompanied by promotion for a cryptocurrency token. Other messages embedded in the material have criticized the direction of digital entertainment and ownership.

One newly circulated watermark reportedly argues that consumers are losing the ability to resell digital products and urges viewers to “fight now or never.”

That messaging has created a second layer to the leak campaign. The videos are not simply spreading unauthorized gameplay. They are also being used as a vehicle for a broader anti-digital-ownership message and, apparently, cryptocurrency promotion.

That does not establish who CyberLeek actually is.

The identity of the individual or group behind the account remains unknown.

Why is Take-Two subpoenaing X?

Take-Two’s latest move focuses on X, where several accounts connected to the CyberLeek name have appeared.

According to reporting on the new legal action, the publisher is seeking information associated with three accounts containing “CyberLeek” in their names. The goal is to identify the people operating those accounts and potentially connect them to the distribution of copyrighted GTA VI material.

This follows earlier subpoenas targeting Microsoft and Discord.

Those requests show that Take-Two is not merely trying to remove individual clips. It is pursuing the identity behind the distribution network.

That distinction is significant. Takedowns can slow the spread of a leak, but identifying the person or people responsible could allow Take-Two to pursue broader legal remedies.

What information is Take-Two seeking from Microsoft and Discord?

Take-Two filed subpoenas in federal court on August 20 seeking records linked to accounts involved in sharing the leaked material.

The requests reportedly seek identifying information from Microsoft and Discord, including records associated with relevant user accounts and the servers through which the footage was circulated. The companies were ordered to respond by September 4.

The Microsoft request is particularly broad. Reporting on the filings says Take-Two sought information such as device identifiers, login IP addresses, telephone numbers and connected Xbox or OneDrive information for accounts tied to the investigation.

The legal strategy reflects the reality of modern game leaks: the footage may travel through dozens of platforms, but digital records can potentially reveal the path back to the original source.

What happened with the Microsoft subpoena?

A federal court in the Southern District of New York granted the Microsoft subpoena on August 21.

Microsoft has indicated it is cooperating with Take-Two and Rockstar in efforts to protect their intellectual property. Xbox Chief Technology Officer Scott Van Vliet said the company was working with the publisher and developer in response to the leaks.

The cooperation does not mean Microsoft has identified the leaker publicly.

It does mean Take-Two has secured a legal mechanism to request information from a major technology provider rather than relying solely on social-media takedown requests.

What about Discord?

Discord was also targeted because leaked material and discussions surrounding it were reportedly being circulated through Discord servers.

Take-Two asked the platform for identifying information associated with accounts connected to several servers involved in the distribution of the alleged GTA VI material.

Discord has said it reviews and complies with valid subpoenas under its normal legal procedures.

The filings do not establish that every person connected to those servers was involved in obtaining or leaking GTA VI. Participation in a server or discussion does not by itself prove copyright infringement or unauthorized access.

That distinction could become important if the legal investigation expands.

Did Take-Two target GitHub too?

Yes.

Before going after Microsoft and Discord, Take-Two sent GitHub a DMCA takedown notice on August 19 concerning a repository that allegedly contained stolen GTA VI material.

The notice was another indication that the publisher was trying to contain the leak across multiple parts of the online ecosystem rather than focusing on one platform.

The sequence is revealing: remove repositories, pursue distribution channels and then seek identifying information from services that may hold account records.

For Take-Two, the objective appears to have shifted from containment alone to attribution.

Why are the leaks especially worrying for Rockstar?

The content appears to go beyond harmless gameplay snippets.

A number of recent clips reportedly feature the game’s protagonists, vehicles, combat and other systems. The repeated appearance of cutscenes is more concerning because cinematic scenes can reveal story information that Rockstar has deliberately kept under wraps.

If the leakers have access to a substantial development build, they could theoretically expose much more than gameplay mechanics.

That could include missions, dialogue, locations, characters and major plot developments.

The risk for Rockstar is therefore not simply that fans see the game early. Unauthorized footage can interfere with the carefully controlled sequence of information releases that major game publishers use to build anticipation and manage marketing.

Is this the first major GTA 6 leak?

No.

GTA VI was already hit by a massive leak in 2022, when approximately 90 videos of an early development build were published online.

That earlier incident was one of the largest leaks ever seen involving a major video game and led to a major criminal investigation. The hacker responsible, Arion Kurtaj, was later sentenced in the UK to an indefinite hospital order after being found to have carried out the cyberattack as part of the Lapsus$ group.

The current situation appears different.

The earlier breach involved a major hack of Rockstar’s internal systems. The identity and access method behind the current CyberLeek campaign remain unclear.

That uncertainty is one reason the latest leaks are attracting so much attention.

Is CyberLeek actually inside Rockstar?

There is no verified evidence establishing that.

The volume and variety of the leaked footage have prompted speculation that the source could have access to a development build. But that does not necessarily mean the person is a Rockstar employee or has direct access to Rockstar’s internal systems.

Material can be obtained and redistributed after an initial compromise without the eventual leaker being the person who originally breached the system.

That is precisely why Take-Two’s subpoenas matter. The company appears to be trying to reconstruct the chain of distribution and determine who is behind the accounts responsible for publishing or amplifying the material.

Is the CyberLeek cryptocurrency token connected to the leaks?

The alleged connection is one of the more unusual aspects of the campaign.

The leaked footage has reportedly been used to promote a cryptocurrency token associated with the CyberLeek name. The financial incentive could provide a motive for releasing increasingly valuable material.

However, the existence of a token promotion does not establish who created it or whether the person controlling the token is the same individual who originally obtained the GTA VI files.

It is best described as an apparent monetization strategy rather than a confirmed explanation of the entire operation.

Will the leaks affect Rockstar’s official GTA 6 presentation?

For now, the official schedule remains intact.

Netflix says “Grand Theft Auto VI: An Extended Look” will premiere exclusively for Netflix members on August 27 at 3 p.m. Eastern Time. The program is part of an unusual partnership between Rockstar and Netflix that gives viewers an extended look ahead of the game’s launch.

Grand Theft Auto VI itself is scheduled for November 19, 2026, on PlayStation 5 and Xbox Series X|S.

There is currently no indication that the leak campaign has forced Rockstar or Take-Two to change either date.

Ironically, the leaks may make the official presentation even more important. Rockstar now has an opportunity to put controlled, high-quality footage in front of audiences before unofficial clips dominate the conversation.

Why the timing of the leaks matters

The timing could hardly be more inconvenient for Rockstar.

The company is entering the final promotional stretch for what is expected to be one of the biggest entertainment launches of the year. The Netflix presentation was designed to create a carefully managed burst of attention.

Instead, fans have been receiving a steady stream of unauthorized clips.

That creates a strange marketing tug-of-war.

Rockstar wants to decide what players see, when they see it and in what context. The leaker is effectively trying to seize control of that sequence by releasing small pieces of the game whenever they choose.

For a franchise built on secrecy and spectacle, that is a direct challenge to the marketing strategy.

Could the leaks spoil the game before launch?

Potentially, yes.

The more footage that emerges, the greater the risk of exposing story details.

This is especially true if the person or group behind CyberLeek continues releasing cutscenes. Even short clips can reveal dialogue, character relationships or mission outcomes when combined with other leaked material.

The risk is not just individual spoilers.

Fans can aggregate clips, map locations and reconstruct sequences long before the official release. Once information enters the internet’s archive, removing every copy becomes extremely difficult.

Take-Two’s legal approach therefore makes sense as an attempt to slow the spread before the material becomes too widely replicated.

What happens next?

The immediate focus will be on the subpoenas and whether they generate useful identifying information.

Take-Two has already expanded its investigation from Discord and Microsoft to X, while previous enforcement action targeted GitHub. The next question is whether those platforms can provide records that connect the CyberLeek accounts to a specific person or network.

At the same time, Rockstar’s August 27 presentation is approaching.

That means the leak battle and the official marketing campaign are now running on parallel tracks.

For gamers, the practical consequence is straightforward: more unofficial footage could appear before the official showcase, potentially carrying major spoilers.

For Take-Two, the larger challenge is figuring out not only how to delete the videos, but who keeps putting them back.

The bigger picture

The latest GTA VI leaks show how difficult it has become to keep major entertainment projects secret in the final stages of development.

A game of this scale is produced across huge teams, complex cloud environments, testing systems and external technology platforms. Every additional copy, account and communication channel creates another potential point of exposure.

Take-Two’s legal response illustrates the other side of that equation.

The company is now using copyright law and court-backed subpoenas to trace the digital trail left by the leaks.

Whether that trail leads to CyberLeek remains unknown.

But with the ninth alleged video already circulating and the official GTA VI showcase only days away, Rockstar’s biggest game is entering its final marketing stretch under an unusual cloud: the audience may know far more about it before launch than the studio ever intended.

Key takeaways

Exit mobile version