GTA 6 leaks explained: the 2022 hack, the August 2026 clips and how to spot fakes

Grand Theft Auto VI has leaked for real, more than once, and that is exactly why fake leaks work: once genuine footage exists, a fabricated clip only has to look plausible next to it⁷⁸. This page covers the leaks that actually happened, what Rockstar did about them, why we never build on leaked material, and how to judge anything new that turns up.

In September 2022, roughly 90 video clips from an unfinished internal build of Grand Theft Auto VI appeared online. It was the largest leak in the series' history, and at the time Rockstar had not announced the game's title, shown any footage or confirmed anything about it².

What actually happened

The material came out of a network intrusion rather than a disgruntled employee. Arion Kurtaj, then 17 and from Oxford, was a key member of the international cybercrime group Lapsus$, which also attacked Uber and Nvidia. The gang's attacks cost those companies close to $10 million in total¹.

The Rockstar breach happened while Kurtaj was on bail for earlier hacking and under police protection in a hotel. He used a mobile phone, the hotel television and an Amazon Fire Stick to do it. Rockstar told the court the incident cost it $5 million and thousands of hours of recovery work¹².

In December 2023 Kurtaj, by then 18, was handed an indefinite hospital order. He had been found unfit to stand trial because of severe autism, so a jury was asked only whether he committed the acts. A mental health assessment used at sentencing said he intended to return to cybercrime as soon as he could¹. He was later reported to have left hospital and to be awaiting a retrial³.

Rockstar's response

Rockstar acknowledged the intrusion publicly, said confidential information had been accessed and downloaded, and said it was disappointed that details of the game had reached players that way². It did not confirm the contents, and it has never treated the material as part of the game's marketing⁴.

Four years on, Rockstar North's Aaron Garbut described the experience on record to Bloomberg in October 2026. He called seeing early work circulate weirdly invasive and hard to deal with emotionally, and head of publishing Jennifer Kolbe linked the leak to the studio's five-days-in-office rule, which she said is unlikely to loosen soon.¹¹

The August 2026 gameplay leak

In August 2026, gameplay clips and a map screenshot surfaced days before the Extended Look premiered. Rockstar responded with DMCA takedown notices against people sharing them, which is itself a strong signal: a company does not claim copyright over footage that is not its own.⁷

Even confirmed material can misinform. The 2026 clips came with a stated protest motive attached by the leaker, which shapes what gets released and how it is framed. And genuine footage from an unfinished build shows features that may be cut, placeholder or rebalanced before release. Real is not the same as final.⁷

A separate leak, a year later

The 2022 breach is often confused with a second, much smaller incident. In December 2023 a copy of Trailer 1 escaped online a day before its scheduled premiere, and Rockstar responded by publishing the real trailer early⁵. That was a marketing leak, not a hack of the game's code.

Why we do not use the 2022 material

Three reasons, and they are all practical rather than sentimental. It is stolen, so publishing it would mean profiting from a crime with a named victim. It is unfinished, taken from a build years from release, so its maps, mechanics, place names and dialogue tell you about a prototype and not about the shipping game. And it is unverifiable, because Rockstar will never confirm or deny anything in it, which means nothing in it can meet our sourcing standard²⁴.

This matters more than it sounds, because a lot of what circulates as GTA 6 fact is downstream of that material: map sizes, radio station names, weather systems and vehicle lists. If a claim cannot be traced to Rockstar, a trailer, or a named interview, we do not publish it as fact⁴.

How to spot a fake GTA 6 leak

A method beats instinct. Run any new clip, screenshot or "insider" post through five checks before you believe it or share it.

• Has Rockstar reacted? Takedowns are the clearest confirmation a leak is genuine, because the claim is a copyright claim.⁷
• Where did it first appear, and does that trail survive? Real leaks have a traceable first post, not a reupload with no origin.⁷⁸
• How old could it be? Even genuine leaked builds can be years out of date and no longer represent the shipping game.⁷
• Does it contradict the official material? Compare it against the Extended Look and the official site before believing it.⁹⁴
• Is someone monetising it? A leak that arrives attached to a paywall, a download or a crypto address is a scam wearing a leak costume.⁷

Rockstar published the Extended Look on 27 August 2026, premiering on Netflix and then on its own YouTube channel and the Grand Theft Auto VI site, and stated it was captured entirely from in-game footage on PlayStation 5. That gives you a known-good reference for how the game actually looks in motion. Anything visibly sharper, smoother or differently lit than that reference deserves suspicion.⁹¹⁰

Fabricated material tends to fail on consistency rather than fidelity. Interfaces are the usual giveaway, because a fake maker has to invent a heads-up display, a map style and a font, and those rarely match across separate clips from the same supposed build. Compare any suspect footage against the Extended Look, which Rockstar states was captured entirely from in-game footage on PlayStation 5.⁹¹⁰

Framing is the other tell. Genuine leaked capture is usually mundane, badly framed and too long. Material made to go viral is short, well composed and arrives with a caption telling you what you are supposed to conclude.⁷

If a leak is real, someone reputable will report it and Rockstar will usually try to remove it. If a leak is fake, it will arrive with confident narration, no origin, and often a link asking for something. When in doubt, wait a day. Real leaks do not disappear, and fake ones fall apart.⁷⁸

Why a leak like this is such a big deal for a game this size

It helps to know the scale of what was actually broken into. GTA V, the studio's previous mainline release, was built by a team of more than 1,000 people on a development budget above $265 million, one of the most expensive entertainment productions ever made at the time⁶. Grand Theft Auto VI is a larger production than that by every public signal Rockstar has given, more animation, more voice work, more regions. A breach of a build at that scale is not comparable to a small studio's leak; it is closer to a heist against one of the most tightly controlled productions in the entertainment industry, which is part of why the case drew a cybercrime prosecution rather than a quiet takedown notice².

What the leak did and did not change about the finished game

Nothing Rockstar has since shown suggests the 2022 material forced a redesign. The Only in Leonida cast, the region descriptions and the systems demonstrated in the Extended Look all read as a studio executing a plan rather than one reacting to an emergency four years earlier⁴. That is circumstantial, not confirmed by Rockstar directly, but it is consistent with how the studio has talked about the incident: as a theft of confidential material, not as a disruption to the project itself².

The wider pattern the Rockstar breach belonged to

The Rockstar intrusion was not an isolated incident targeting the games industry specifically. Lapsus$ ran a short but aggressive campaign against multiple large technology companies in 2021 and 2022, and courts were told the group's attacks on Uber and Nvidia alone cost those companies close to $10 million between them¹. Rockstar's leak fits the same pattern the group used elsewhere: gain access through social engineering or compromised credentials, extract as much as possible quickly, and leverage the material for attention rather than financial ransom in the traditional sense.

That pattern matters for how seriously to take the theft, and it is one more reason we do not treat leaked material as a legitimate news source anywhere on this site, not just for GTA VI. A leak obtained this way tells you about a criminal group's access and methods. It does not tell you anything reliable about a finished product, because the group's goal was disruption and notoriety, not an accurate account of the game.

Where the legal case stood as of our last check

Kurtaj's case did not end with the December 2023 hospital order. Later reporting says he was discharged from hospital and was awaiting a retrial, since the original hearing determined only whether he committed the acts, not a full criminal conviction in the ordinary sense, on account of his being found unfit to stand trial³. We will update this page if that retrial produces a new outcome, but nothing about it changes our position on the leaked material itself.

None of this is a small footnote to the GTA VI story. It is the reason a large share of what circulated online between 2022 and the Extended Look was wrong, wildly so in places, and it is the single best explanation for why this site treats official Rockstar material as the only foundation worth building on.