Originally published in Spanish on El Rack. Browser translation handles the rest of the site fine if you're into homelab/security content.
On August 18, 2026, nine days before GTA VI's official Netflix reveal, two videos claiming to show gameplay footage started circulating, along with an image of what's supposedly the full Vice City map. A group calling itself Cyberleek claimed responsibility, and what started as another leak has turned into something with the shape of a real security incident — manifesto, demands, and threats of more material if those demands aren't met.
What's confirmed, and what isn't
The footage shows Jason, one of the game's protagonists, at the beach house already seen in the second official trailer, shooting hoops in the yard — with technical details (a coin-pickup-style sound effect on scoring) the community is reading as an authenticity signal. Growing DMCA takedown activity on the shared content reinforces that reading, though as with any leak, the possibility of AI-generated footage means caution is warranted until there's official confirmation. Some reports suggest the material could be over a year old, which would fit with a leak from an older development build rather than the game's current state.
"If we can reach Rockstar, no one is safe" isn't the language of a casual leak — it's extortion-manifesto language, the same pattern we've seen in corporate attacks well outside the gaming industry.
The manifesto: this isn't just about GTA VI
Cyberleek frames the attack as protest against Rockstar and Take-Two's decision not to ship a physical disc release, and the shared text goes further, attacking the industry's broader monetization playbook: games-as-a-service, digital licenses instead of real ownership, disc-locked content behind paid DLC. The group demands publishers "behave" and explicitly threatens to extend attacks to other companies if demands aren't met — a message aimed at the whole industry, not just Rockstar.
There's a contradiction worth flagging: the manifesto insists "this isn't for money," but parallel reports suggest the group is charging for a poll to pick the next leak — the classic double-talk of modern extortion, stated principles in public, monetization in private.
How this compares to the 2022 precedent
In September 2022, an attacker identifying as "teapotuberhacker" (linked to the Lapsus$ collective) published roughly 90 videos from a very early development build, in what Rockstar officially confirmed as a real intrusion into their servers — not a careless employee leak, but an actual technical compromise of their infrastructure. The current leak, per the outlets covering it, is the second-largest since then, though visibly smaller in scope than 2022 (2 videos vs. 90).
The context that makes this more flammable
GTA VI has already taken two consecutive delays — from fall 2025 to May 2026, then to November 2026 — with Take-Two's own CEO acknowledging the current timeline runs roughly 18 months behind the original plan. With a fanbase running on years of anticipation, any leak, real or not, finds fertile ground to go viral before the company can respond officially.
Verdict
Beyond the gaming angle, this is a textbook case study in modern digital extortion: a real intrusion (or leak), a public manifesto with explicit threats against third parties, and covert monetization despite the "not about money" framing. Worth tracking for anyone in security — less for GTA VI itself, more for what it reveals about how these groups operate today.
Full article (in Spanish): elrack.es/seguridad/filtracion-hackeo-gta-6-cyberleek-2026
Top comments (0)