Highlights
- Take-Two has subpoenaed Microsoft and Discord to help identify CyberLeek over the GTA VI leaks.
- Developers reportedly believe the leaked footage came from a PC build, while the Rockstar India breach theory remains unverified.
- CyberLeek has leaked GTA VI gameplay and map details while threatening more releases.
Take-Two has subpoenaed Microsoft and Discord for information that could identify the source of the latest Grand Theft Auto VI (GTA VI) leaks. At the same time, unverified claims point to a PC development build and a possible breach at Rockstar India.
The GTA VI leak has moved from social media takedowns to a federal legal effort to identify those responsible. Take-Two filed Digital Millennium Copyright Act (DMCA) subpoenas in the U.S. District Court for the Southern District of New York on Aug 20, 2026, targeting Microsoft and Discord for records that could help unmask the persona known as “Cyberleek.” Both companies have been given until Sep 4, 2026, to respond.
The legal filings follow several clips and images that appear to show unreleased GTA VI content. Take-Two described the material as including copyrighted audiovisual content, artwork, dialogue, images, and other creative elements. Xbox CTO, Scott Van Vliet, also stated that Microsoft is working with Take-Two and Rockstar to protect their intellectual property (IP).
GTA VI Leak Leads to PC Build Questions
The source of the leaked build remains unclear. Creator TheRavenHelm noted on X that multiple developers believe the footage came from a PC build rather than a PS5 or Xbox Series X devkit. The reasoning is based on the restricted nature of console development hardware and the ability of internal PC builds to run debug executables on conventional hardware.
The claim has not been independently established.
TheRavenHelm reported that two developers from major studios discussed the footage privately, but public evidence confirming those conversations is unavailable. The account has also previously faced criticism over GTA VI claims, according to context attached to the post.
A separate theory alleges that a Rockstar India employee was compromised through phishing, with Russian hackers allegedly obtaining the development build and later selling it to CyberLeek for around $50M USD. However, this theory remains entirely unverified and is based on viral claims circulating across social media. Neither Rockstar Games nor Take-Two Interactive has confirmed the alleged phishing attack, the involvement of Russian hackers, or the reported sale.
The Rockstar India angle was first reported by Hassam Nasir, a tech reporter at TweakTown, who was among the earliest journalists to connect the alleged breach to Rockstar's India operations. His report presented the connection as a rumor and noted that neither Rockstar Games nor Take-Two Interactive had confirmed it. The theory later spread across social media, where separate posts repeated claims about the alleged employee compromise, Russian hackers, and the reported transaction.
There is no independent verification of any of these claims as of this writing.
The context is notable because workforce estimates indicate that around 1,615 India-based developers are reportedly involved in GTA VI. This would make Rockstar India one of the largest, if not the largest, individual studio contributors to the project.
Rockstar India has previously been associated with leaked Rockstar-related material, including Red Dead Redemption 2 (RDR 2) assets and portfolio material linked to Indian outsourcing studios. However, those documented incidents do not establish that the latest GTA VI leak originated from Rockstar India.
What Has CyberLeek Leaked Yet?
The material attributed to CyberLeek has expanded beyond screenshots. Reported leaks include:
- Cropped sections of the alleged Leonida map, including Dalton Island, Tequesta Retreat, Gloriana Key, and Catalan Key.
- Driving footage, including a confrontation with a truck driver.
- A sequence involving Jason taking a security guard's taser.
- An item called Zombix, reportedly described as a healing drug whose effects weaken with repeated use.
- Basketball gameplay featuring protagonist Jason Duval.
- A hypercar driving clip.
- A plane sequence showing Jason flying over Vice City.
The plane footage is particularly significant because the player appears to control Jason directly before firing bullets into a wall to spell “LEEK.” The footage also shows traffic, advertisements, boats, and environmental details across GTA Vice City. Some users have attempted to match the flight path with the previously leaked map.
Other reported gameplay elements include basketball, vehicle interactions, a stamina bar, and an honor system resembling RDR 2. The alleged map contains five counties, railway networks, and smaller islands.
CyberLeek Threatens More GTA VI Spoilers
CyberLeek has presented the leak as a protest against digital pre-orders, paid single-player DLC, and games losing offline functionality after online services shut down. Its manifesto also calls for physical copies to remain available. The group has threatened to release more material, including the game's ending, and has promoted a Solana-based cryptocurrency through its campaign.
The incident comes four years after Rockstar suffered another major breach, when about 90 videos showing an early GTA VI build were leaked. The hacker, Arion Kurtaj, was later convicted of that attack. The current material appears to involve a different and potentially more recent build.
The timing adds pressure on Rockstar.
GTA VI is scheduled to receive its official extended preview on Aug 27, 2026, and launch on Nov 19, 2026. With Take-Two now seeking account and platform records, the investigation has shifted from removing individual copies to identifying the source of the leak.
For now, the PC-build theory is based on reported developer observations, while the Rockstar India breach and CyberLeek's claim to possess the game's ending remain unverified.
