The 2022 GTA 6 leak explained, and why we do not use it

In September 2022, roughly 90 video clips from an unfinished internal build of Grand Theft Auto VI appeared online. It was the largest leak in the series' history, and at the time Rockstar had not announced the game's title, shown any footage or confirmed anything about it².

What actually happened

The material came out of a network intrusion rather than a disgruntled employee. Arion Kurtaj, then 17 and from Oxford, was a key member of the international cybercrime group Lapsus$, which also attacked Uber and Nvidia. The gang's attacks cost those companies close to $10 million in total¹.

The Rockstar breach happened while Kurtaj was on bail for earlier hacking and under police protection in a hotel. He used a mobile phone, the hotel television and an Amazon Fire Stick to do it. Rockstar told the court the incident cost it $5 million and thousands of hours of recovery work¹².

In December 2023 Kurtaj, by then 18, was handed an indefinite hospital order. He had been found unfit to stand trial because of severe autism, so a jury was asked only whether he committed the acts. A mental health assessment used at sentencing said he intended to return to cybercrime as soon as he could¹. He was later reported to have left hospital and to be awaiting a retrial³.

Rockstar's response

Rockstar acknowledged the intrusion publicly, said confidential information had been accessed and downloaded, and said it was disappointed that details of the game had reached players that way². It did not confirm the contents, and it has never treated the material as part of the game's marketing⁴.

A separate leak, a year later

The 2022 breach is often confused with a second, much smaller incident. In December 2023 a copy of Trailer 1 escaped online a day before its scheduled premiere, and Rockstar responded by publishing the real trailer early⁵. That was a marketing leak, not a hack of the game's code.

Why we do not use the 2022 material

Three reasons, and they are all practical rather than sentimental. It is stolen, so publishing it would mean profiting from a crime with a named victim. It is unfinished, taken from a build years from release, so its maps, mechanics, place names and dialogue tell you about a prototype and not about the shipping game. And it is unverifiable, because Rockstar will never confirm or deny anything in it, which means nothing in it can meet our sourcing standard²⁴.

This matters more than it sounds, because a lot of what circulates as GTA 6 fact is downstream of that material: map sizes, radio station names, weather systems and vehicle lists. If a claim cannot be traced to Rockstar, a trailer, or a named interview, we do not publish it as fact⁴.

Why a leak like this is such a big deal for a game this size

It helps to know the scale of what was actually broken into. GTA V, the studio's previous mainline release, was built by a team of more than 1,000 people on a development budget above $265 million, one of the most expensive entertainment productions ever made at the time⁶. Grand Theft Auto VI is a larger production than that by every public signal Rockstar has given, more animation, more voice work, more regions. A breach of a build at that scale is not comparable to a small studio's leak; it is closer to a heist against one of the most tightly controlled productions in the entertainment industry, which is part of why the case drew a cybercrime prosecution rather than a quiet takedown notice².

What the leak did and did not change about the finished game

Nothing Rockstar has since shown suggests the 2022 material forced a redesign. The Only in Leonida cast, the region descriptions and the systems demonstrated in the Extended Look all read as a studio executing a plan rather than one reacting to an emergency four years earlier⁴. That is circumstantial, not confirmed by Rockstar directly, but it is consistent with how the studio has talked about the incident: as a theft of confidential material, not as a disruption to the project itself².

The wider pattern the Rockstar breach belonged to

The Rockstar intrusion was not an isolated incident targeting the games industry specifically. Lapsus$ ran a short but aggressive campaign against multiple large technology companies in 2021 and 2022, and courts were told the group's attacks on Uber and Nvidia alone cost those companies close to $10 million between them¹. Rockstar's leak fits the same pattern the group used elsewhere: gain access through social engineering or compromised credentials, extract as much as possible quickly, and leverage the material for attention rather than financial ransom in the traditional sense.

That pattern matters for how seriously to take the theft, and it is one more reason we do not treat leaked material as a legitimate news source anywhere on this site, not just for GTA VI. A leak obtained this way tells you about a criminal group's access and methods. It does not tell you anything reliable about a finished product, because the group's goal was disruption and notoriety, not an accurate account of the game.

Where the legal case stood as of our last check

Kurtaj's case did not end with the December 2023 hospital order. Later reporting says he was discharged from hospital and was awaiting a retrial, since the original hearing determined only whether he committed the acts, not a full criminal conviction in the ordinary sense, on account of his being found unfit to stand trial³. We will update this page if that retrial produces a new outcome, but nothing about it changes our position on the leaked material itself.

None of this is a small footnote to the GTA VI story. It is the reason a large share of what circulated online between 2022 and the Extended Look was wrong, wildly so in places, and it is the single best explanation for why this site treats official Rockstar material as the only foundation worth building on.