The GTA 6 Leaks, Explained — CyberLeek's 'Extended Leek' and What's Real

Updated October 21, 2026. CyberLeek says it has stopped — "for now." On October 14 the leaker posted an "End of the road" message: no full game, because its meme coin missed a $30 million target it had set itself, and the story's ending kept back. That closed a week in which it posted the 25-minute "Extended Leek" on October 8, a few minutes of Lucia, and clips it says come from the final missions. None of the October footage is verified: Rockstar has not commented, and nobody has shown that the same person is behind it. Rockstar did confirm that August's clips were real, and nothing in any of it confirms a feature of the game that ships on November 19.

There have now been four GTA 6 leaks, and they are routinely confused with each other: the 2022 hack of Rockstar, CyberLeek's August clips, a 192GB dump of old files on September 18, and October's run. The table further down sorts them out.

One rule has held since this page first went up on August 20: a leak can be real while almost nothing in it is confirmed. Keeping those two things apart is still the whole job.

October 14: "The leeks stop here. For now."

Leaked. On October 14 CyberLeek posted a three-part sign-off titled "End of the road." Its main points, in its own words:

• No full game. "The 30M was not reached, so no build" — a reference to its own ultimatum, below.
• No ending, for now. "CL has the ending. It was considered." Publishing it, the post says, "would ruin the experience for the gamers, who did nothing wrong."
• A threat in reserve. "The dead man's switch is active – story spoilers only. Left alone, it never fires. Whoever removes CL chooses it." In other words, story spoilers go out if the person behind the account is caught.
• A last clip, described as "clips from the final missions, out of context, revealing nothing." We are not describing it.

It also denied running a scam, saying its token "was always a donation, never an investment," and signed off: "The edict stands. The leeks stop here. For now."

Take "for now" literally. The account went quiet for six weeks after August, then came back. Nothing stops it doing the same before November 19, and none of its October material has been verified either way.

October 9–12: a paid poll, Lucia, and a $30 million ultimatum

Leaked. The Extended Leek ended with a poll on what to leak next, and voting cost cryptocurrency. Of four options, a Lucia side mission was far ahead when Insider Gaming checked on October 9; voting closed on October 11.

About five minutes of Lucia surfaced on October 10 and 11: driving, close combat, an ATM and a parachuting side mission, some of it with Lucia nude. Kotaku called the footage grainy and "janky in parts," and noted that bystanders do not react to the nudity — one more sign that something other than normal play is going on.

On October 10 the account set terms: a playable build if its meme coin reached a $30 million market cap, unless Take-Two agreed to "a disc version" — the August grievance, back again. By October 12 it had posted a price list for smaller drops, from a tank at $9 million to a fighter jet at $21 million, with the full "200GB+ playable build" at $30 million. The coin went the other way. It passed $4.75 million over the weekend, then fell by half in a day to about $2.2 million, Kotaku reported. That is the 30M that was "not reached."

October 8: the "Extended Leek"

Leaked. The drop surfaced on October 8 as a ZIP archive of roughly 370MB, titled "Extended Leek" — a dig at Rockstar's Netflix Extended Look. CyberLeek's website had teased it three days earlier with a poll made of question marks, set to close that day. Video Games Chronicle, which has seen the footage and says it appears authentic, and the outlets that have described it report:

• A Thrillbilly Mud Club event, at the off-road venue glimpsed in the first trailer. Jason and Lucia shop for outfits for it and talk to their rivals, then Jason enters a dirt race against bikes and cars.
• A custom-garage upgrade and a street race. Jason takes a car, has it upgraded and re-decaled, and races it on the street.
• First-person driving and walking. Several drives are shot from the driver's seat, and Jason later walks around in first person. More on that below.
• A lot of nudity. Jason is fully nude for around 14 minutes, and Lucia is shown topless near the end, running to the top of a tower before a jump.

Three things keep this drop at arm's length. Rockstar has said nothing about it — its August 26 statement covered August's clips, and it does not carry over. Nobody has established that the person posting now is the one who posted in August; the drop's own sign-off reads "Cyberleek could be anyone. Even a liar." And at one point a tank appears from nowhere and is dropped into a river, which is either a cheat code or a sign of a modified build. If it is the latter, the nudity and anything else in the footage may not reflect the real game.

The sign-off also asked for money. It describes a project that is "Not Rockstar related. Gaming related," which "needs expensive hardware," and says "What is collected goes to the project." That is the same pattern as August's meme coin, below, and the same reason to treat the account's framing, as opposed to its footage, as unreliable.

We are not describing story content from any of the October drops.

The first-person question

Leaked. The most consequential thing in the October 8 footage is the camera. Several drives are shown from the driver's seat in first person, and later Jason walks around outside the car in first person too.

Rumored. That cuts against the only account of how Rockstar sees it. A creator invited to Rockstar's August preview reported that the game is built around a third-person camera, with first-person limited to aiming some weapons. That came from the creator, not from Rockstar, so it was only ever a rumor.

Rockstar itself has never said whether GTA 6 has a first-person mode. A development build can carry cameras that never ship, and GTA V launched without a first-person mode in 2013, then added one a year later on PS4 and Xbox One. Insider Gaming has since reported suggestions — it did not say from whom — that the first-person and nude scenes were produced by manipulating the build. Neither that nor the unbothered bystanders in the Lucia footage settles anything, but both point the same way as the tank in the river. So a fuller first-person view is leaked — where V-Rock landed in August, and just as far from confirmed.

A correction of our own. Until October 10, our list of everything confirmed carried a first-person mode as confirmed, citing the Trailer 2 press release. Rockstar has said no such thing, there or anywhere else we can find. That entry is corrected.

Which GTA 6 leak is which

	September 2022 breach	CyberLeek, August	192GB dump	CyberLeek, October
Surfaced	September 18, 2022	August 18–26, 2026	September 18, 2026	October 8–14, 2026
Source	A hack of Rockstar's internal network	A leaker with apparent access to a playable build	Files from the 2022 breach, circulated privately until now	Posted under the CyberLeek name; the same source is not established
Age of material	Early development	Possibly a build a year or more old	At least four years old	Unknown
GTA 6 content	90+ development videos	Gameplay clips, map images, a radio menu	Early, low-quality map renders	About 25 minutes of gameplay, then shorter clips of Lucia and of late missions
Rockstar's response	Confirmed within a day	Acknowledged August 26	None reported	None so far
What it proves	Vice City and a female lead, years before any trailer	The footage is genuine GTA 6; no feature is confirmed	Almost nothing about GTA 6	Nothing yet — it is unverified

If you arrived here looking for the newest GTA 6 leak, it is October's, it is unverified, and the leaker says it has stopped for now. The September dump before it was technically new and substantively old.

GTA 6 leak timeline, newest first

Date	What happened
October 14, 2026	CyberLeek posts an "End of the road" sign-off: no full build, the ending held back, the leaks stop "for now"
October 10–12, 2026	Lucia footage surfaces; CyberLeek promises a playable build at a $30 million meme-coin market cap, and the coin halves instead
October 8, 2026	CyberLeek posts the 25-minute "Extended Leek" after six weeks of silence; Rockstar does not comment
September 18, 2026	A 192GB dump of files from the 2022 breach surfaces — mostly cancelled GTA V content
Late August 2026	Take-Two seeks a second, sealed Discord subpoena, calling its investigation "rapidly evolving"; the court grants it
August 26, 2026	Rockstar acknowledges the leaked footage in an Instagram statement; CyberLeek goes quiet
August 21, 2026	A New York federal court approves Take-Two's subpoenas to Microsoft and Discord
August 20, 2026	Take-Two files the subpoenas; a leaked clip shows the radio-station menu
August 18, 2026	CyberLeek begins posting unreleased gameplay
January 14, 2026	A 32-player online detail surfaces at a Glasgow employment tribunal (what it proves)
December 4, 2023	Trailer 1 leaks online; Rockstar releases it early the same evening
September 19, 2022	Rockstar confirms the breach
September 18, 2022	More than 90 development videos are posted online

We add a row the day anything new surfaces.

September 18: the 192GB dump, and why it is mostly not a GTA 6 leak

Leaked. On September 18 — four years to the day after the original breach went public — roughly 192GB of Rockstar development material appeared online. According to reporting on the files, they come from the September 2022 intrusion into Rockstar's network and had circulated privately among a few people ever since. This is not new access to Rockstar. It is old stolen material changing hands in public.

Most of it is about GTA V, and that is where its genuine news value lies:

• A cancelled Liberty City expansion for GTA V's single-player, with map outlines far larger than GTA IV's version of the city.
• The long-rumoured "Agent Trevor" single-player DLC — a spaceship location, spacesuits, and a mansion with a large underground area.
• An alternate ending in which Trevor dies in a tank of liquid nitrogen rather than the tanker explosion that shipped.
• Cut missions, including Brucie from GTA IV appearing alongside Franklin.

The GTA 6 portion is thin: early map assets, rendered at very low quality, showing a Vice City downtown, an international airport, a sports stadium, docks, a cruise terminal and Everglades-style terrain. Everything in it predates September 2022, which makes it older than the first trailer and three years older than anything CyberLeek released. It is not a picture of the map that ships, and it has no connection to the CyberLeek persona.

That is why the headlines calling this a GTA 6 leak are overselling it. For anyone interested in the history of GTA V, the dump is fascinating. For anyone trying to learn about GTA 6 before November 19, it adds almost nothing that the trailers and the Extended Look have not already shown better.

What CyberLeek released in August

From August 18 an anonymous account calling itself CyberLeek published unreleased Grand Theft Auto VI material in near-daily instalments. Reported contents, in order:

• August 18 — two clips of Jason at a waterside safehouse and driving through Leonida, including melee combat with an NPC and a police escape. Interface elements are visible: a loadout and storage menu, a fuel gauge, and a wanted level. Separately, map images circulated naming locations including Dalton Island and Catalan Bay.
• August 19 — vehicle theft using a "clone key" device, disarming a security guard, a cutscene featuring a character named Cal, knife combat with police, and a looting system that observers compared to Red Dead Redemption 2's.
• August 20 — daytime flight in a crop-duster over Vice City, giving the widest look yet at the map's scale, and a browse through the radio-station menu.

Releases continued through August 26, by which point story spoilers were circulating too — we will not describe them here. The account then went quiet for six weeks, until the October drops above.

Why the August footage is real — and acknowledged

Leaked. For the first week, the case for authenticity was behavioural, and it was a strong one.

Take-Two issued DMCA takedowns against the clips. On August 20 it escalated, filing two requests in a New York federal court seeking records from Microsoft and Discord — IP addresses, phone numbers, linked Google and Xbox accounts, device identifiers, telemetry, and OneDrive files tied to accounts connected to the CyberLeek persona. The filings name two further accounts, CinematicRockstar and Surfer24k. The court approved the subpoenas on August 21.

Take-Two kept going. It sought records from X and YouTube as well, later withdrawing the YouTube request because it no longer needed the information. In late August it asked the court for a second Discord subpoena, aimed at one previously identified user and one more, and asked to file it under seal: making it public, its lawyers argued, "could compromise Take-Two's ongoing investigation and even tip off the alleged infringers." They called the investigation "rapidly evolving," and PC Gamer reported on September 1 that the court had granted the request. The September 4 compliance deadline on the first subpoenas has since passed, and no identification of the person behind CyberLeek has been made public.

On August 26 it stopped being inference. Rockstar posted a statement to its official Instagram:

It would be an understatement to say that having videos of Grand Theft Auto VI gameplay leak this way has been heartbreaking for our team, and this is obviously not how we intended for you to see the game after all this time.

That is Rockstar describing the clips as videos of Grand Theft Auto VI gameplay. For the August footage, the authenticity question is closed. It does not close it for October's drops, which is why they are treated separately above.

But authentication of the material is still not authentication of any claim inside it, and Rockstar's statement addressed nothing specific. A real clip from a real build shows one build, at one moment, with no context for what shipped, what changed, or what was cut. Insider NateTheHate — an industry leaker with a reasonable record on release timing — has suggested the footage originates from a build over a year old. If that is right, every mechanic visible in it is a snapshot of GTA 6 as it was, not a promise of GTA 6 as it will be.

The V-Rock question, reopened

Leaked. The August 20 radio menu appears to list V-Rock — Vice City's original hair-metal station — alongside eMotion 98.3 and a set of unfamiliar names including Back Country Radio, Symphony FM, Stockyard FM, Circoloco Records Radio, and Dirty South Classics. A separate "On-Demand" option is also visible, which has no obvious precedent in earlier GTA radio interfaces.

This matters here more than most places, because our soundtrack ledger had carried V-Rock as expected but not confirmed for months, on nothing firmer than community frame-hunting of Trailer 2 wardrobe.

A station name legible in a menu from a real build is a materially better class of evidence than a t-shirt in a trailer frame. It is still not Rockstar saying so. V-Rock moved from speculation to leaked, and stopped there.

September 17 update. We said V-Rock would graduate when Rockstar named a station, probably in a soundtrack Newswire post close to launch. That post arrived — Grand Theft Auto VI: The Album, 34 original tracks — and it named no station at all while promising "the next evolution of in-game radio." V-Rock is exactly where this leak left it.

The stated motive, and why it lands close to home

CyberLeek's framing was not "here is cool footage." It was a protest, and the specific grievance is one this site had already documented.

The leaker's stated objection is Rockstar's decision to ship physical copies containing a download code rather than a disc — a detail in our confirmed ledger since the June 25 pre-order launch, and part of the broader industry shift we covered when PlayStation announced it was ending disc production in 2028. The persona extended the complaint to digital pre-orders, what it called "fake single-player DLC," and publishers not maintaining access to single-player games, and said it would not stop until Rockstar issued a public statement and apology.

Reporting a motive is not endorsing it. Whatever one thinks of disc-free physical editions — and it is a real grievance with a real constituency — the response here was to steal and publish an unreleased game, which is not a consumer-rights action and is not defensible as one.

What happened to the demand. Rockstar's August 26 statement did contain an apology — "We are very sorry that everything has taken as long as it has" — but for the long wait, not for the disc policy it was supposedly answering. The account went quiet the same day, and stayed quiet for six weeks. Whether one caused the other is unknowable: the Extended Look aired the following afternoon, and a leak's leverage disappears once the official version is out. We note the sequence, not a cause. When the account came back in October, the disc demand came back with it, this time as the one thing that would stop a build leaking, attached to a crypto target that was never reached.

Reasons to keep the confidence dial low

Three specific cautions, beyond the age-of-build problem:

The meme coin. The CyberLeek persona used the attention around the leak to promote a cryptocurrency token. Kotaku reports that it seemingly made off with roughly $250,000 when it went quiet in August, and in October it priced new footage against the token's market cap. That is not a detail to bury. A leaker with a financial position in their own notoriety has an incentive to maximise drama, stretch claims, and keep the story running — which is a reason to treat any narrative framing from the account, as opposed to the raw footage, as unreliable.

A possible second source. A separate group, reportedly unrelated to CyberLeek, has claimed access to internal Rockstar development files, including an unpublished screenshot said to come from an April 2026 build. This thread remains considerably less corroborated than the CyberLeek material, and we are not treating it as established. It is also not the 192GB dump, which is older material from 2022.

Secondary interpretation. A great deal of what circulated was not footage but readings of footage — claims about morality systems, stamina meters, enterable-building percentages, and map dimensions inferred from a few aerial seconds. Inference from a handful of frames is how the "three protagonists" myth survived two years. Interface elements visible on screen are evidence; systems inferred from them are not.

What it meant for August 27 — and the call we got wrong

Confirmed. Our position on August 20 was explicit: the leak would not change the release date, would not change the Extended Look date, and would not confirm a single feature. All three held. The Extended Look aired on August 27 exactly as announced — Netflix first, Rockstar's own channels six hours later — November 19 did not move, and nothing became confirmed by being leaked.

We also said something else in this section, and it was wrong. We wrote that Rockstar would answer the leak with the Extended Look "not by acknowledging the leak, which Rockstar will almost certainly never do." Rockstar acknowledged it the day before the Extended Look aired, in the statement quoted above.

We should have seen it coming. The precedent pointed the other way: when the 2022 breach put more than 90 development videos online, Rockstar confirmed it within a day. The call is on our prediction record as a partial — three parts right, one confidently wrong.

The part of the reasoning that did hold up was the tonal one. The Extended Look made the stolen version the worse way to see the game — official, high-quality, freely available footage of much of what had leaked in compressed off-screen captures. That did more than takedowns could.

A note on what we are not doing

We are not hosting, mirroring, embedding, or linking to the leaked material — CyberLeek's August clips, its October footage, or the 192GB files — and we are not telling readers where to find any of it. We are also not describing the clips the account says come from the final missions. The sources below are mainstream coverage of the events, not the material. Describing what a leak establishes is the reporting; distributing stolen material from an unreleased game is not, and the distinction is not a close call.