For the better part of two weeks, Rockstar Games has been losing a race it never agreed to run. While the studio quietly polished its official “Extended Look” trailer for a scheduled Netflix premiere on August 27, an anonymous figure calling themselves Cyberleek (also seen styled as “LEEK”) beat them to the punch — repeatedly.
The Leak Timeline
The saga kicked off around August 18, when two gameplay clips and a set of map images from the in-development world of Leonida — GTA 6’s Florida-inspired setting — surfaced online. The clips looked credible enough that Rockstar began issuing takedown notices almost immediately, which many fans read as tacit confirmation the footage was real.
From there, the drip became a flood. Over the following days, Cyberleek posted roughly eight separate clips, including protagonist Jason inside a strip club, Jason flying over the city, and — most tellingly — a clip of Jason shooting the word “Leek” into a wall, seemingly to prove the leaker wasn’t just replaying old footage but actively controlling a playable build of the game. The footage reportedly comes from an older 2022–2023 development build, meaning some of what’s shown (fuel consumption mechanics, a stamina meter, an apparent karma system) may not reflect the final game.
Cyberleek framed the campaign as a protest, publishing a manifesto opposing digital-only game launches and day-one paid DLC, and warning other publishers they could be targeted next. The leaks were also stamped with promotional watermarks for a memecoin, which most outlets covering the story believe is an opportunistic crypto scam riding on the attention rather than a genuine part of the protest.
Take-Two Goes to Federal Court
Rockstar’s parent company, Take-Two Interactive, didn’t just rely on takedown notices this time. On August 20, Take-Two petitioned the U.S. District Court for the Southern District of New York for DMCA subpoenas against both Microsoft and Discord — a legal tool that lets a copyright holder demand identifying user data from a platform without first filing a full lawsuit. The court granted the request by that Friday.
The scope is broad. From Microsoft, Take-Two is seeking the company’s own internal investigative records tied to the Cyberleek persona, along with account data, login IP addresses, phone numbers, device identifiers, and any OneDrive content referencing GTA, Rockstar, or Cyberleek — plus records connected to a GitHub repository where some of the material reportedly surfaced. From Discord, Take-Two wants identifying information for every account across several named servers going back to June 1, including emails, IPs, phone numbers, and linked Xbox and Google accounts. Both companies face a September 4 deadline to comply.
Microsoft’s Xbox division has publicly said it’s cooperating, while Discord confirmed it reviews and complies with valid DMCA subpoenas as a matter of standard practice. Notably, the subpoena’s Discord server list appears to have swept up an unrelated group — the production/editing server of GTA 5 streamer Matthew “DarkViperAU” Judge, who says he has no connection to the leaks.
Despite the legal pressure, Cyberleek hasn’t gone quiet. The leaker’s site briefly went dark at one point, sparking speculation of an arrest, but new material continued to appear afterward. As of this week, Rockstar still hadn’t identified who’s behind the account.
Echoes of 2022
This isn’t Rockstar’s first brush with this exact nightmare. In September 2022, a hacker breached Rockstar’s internal network and released a much larger trove — around 90 clips plus portions of the game’s source code — in what remains one of the most damaging leaks in gaming history. Take-Two confirmed the breach at the time, calling it a “network intrusion,” and said work on the game would continue without disruption. That incident is widely believed to be the reason Rockstar tightened internal security afterward, reportedly including an end to remote development work.
Industry analysts at the time noted an odd silver lining: leaked footage alone tends not to hurt a game’s commercial prospects and can even build hype, but theft of source code or build files raises real security concerns for the finished product. That same tension is playing out again now, just on a smaller scale.
Why It Matters
Beyond the drama, the story is a useful case study in a few things worth digging into further:
- How DMCA subpoenas actually work as a tool for unmasking anonymous leakers without a full lawsuit
- The economics of hype vs. control — whether leaks like this genuinely help or hurt a launch as anticipated as GTA 6’s, which is set to release November 19 on PlayStation 5 and Xbox Series S/X
- Platform responsibility — how much data companies like Microsoft and Discord are compelled to hand over, and what that means for user privacy even for accounts with no real connection to the leak
With Rockstar’s official trailer still to come and the subpoena deadline landing in September, the next few weeks should settle at least part of the story — even if Cyberleek’s identity remains anyone’s guess for now.
Sources referenced:
- Variety — “GTA 6 Leaks: Rockstar Games Subpoenas Microsoft, Discord for Data”
- Game Developer — “Rockstar subpoenas Microsoft and Discord in bid to halt extensive Grand Theft Auto VI leak”
- Cosmic Book News — “Federal Court Grants Take-Two Subpoenas To Unmask GTA 6 Leaker”
- Yahoo News (Kotaku/IGN reporting) — “Take-Two Subpoenas Microsoft and Discord to Unmask GTA 6 Leaker Cyberleek”
- Variety (2022) — “‘GTA 6’ Leak: Rockstar Games Confirms Hack, Says It’s ‘Extremely Disappointed'”
- Sportskeeda — “Take-Two issues statement to investors regarding recent GTA 6 leaks”
