GTA 6 Leaker CyberLeek Explained: Leaks, Memecoin and Cash-Out

In this article

1. What CyberLeek was: a persona, a website and a coin
2. Nine days of leaks: August 18 to 26
3. The Edict and the memecoin
4. Take-Two's court action
5. Rockstar's response
6. August 27: the cash-out and the silence
7. What has (and hasn't) happened since
8. Our take: PC build, marketing stunt or cash grab?
9. FAQ

CyberLeek was an anonymous online persona that posted 16 clips of unreleased GTA 6 gameplay over nine days in August 2026, and every clip advertised a memecoin with the same name. At about 3:27 a.m. ET on August 27, hours before Rockstar's official An Extended Look premiered, the wallet that created the coin cashed out roughly $250,000, according to on-chain analysis reported by CoinDesk. CyberLeek then went silent for six weeks. On October 8, about 25 minutes of new footage appeared under its name, which nobody has verified, and as of October 3 there had been no arrest, no charge, no lawsuit and no confirmed identity.

What CyberLeek was: a persona, a website and a coin

CyberLeek was a name, not a known person. The persona ran its own website, released new gameplay every day for nine days and stamped each clip with a crypto ticker and a QR code. The name was a pun on "leak", and the persona leaned into it. It also cast itself as a consumer champion: with the first clips came a manifesto, the Edict, and the claim that this was not a cash grab.

Official No public record names anyone. No authority has confirmed an identity, nobody has been charged, and the claims circulating online are unverified, so we don't repeat them.

Nine days of leaks: August 18 to 26

Reported The leaks began on Tuesday, August 18, 2026, less than two weeks after Rockstar announced that An Extended Look would premiere on Netflix on August 27. A website posted two gameplay clips and map images, and within hours they were all over X, Reddit and Discord. New clips followed daily: 16 by our count, though some outlets counted 15 and some fan sites 17.

Most showed open-world play, from driving and flying to nightlife, and the last, on August 26, was a story sequence of almost five minutes featuring Lucia Caminos. Reported Day 3 changed the conversation: in one clip the player shot the word LEEK into a wall, widely seen as proof that someone was playing a live build rather than sharing old video files.

Official Court exhibits show Take-Two using YouTube's Content ID and DMCA notices to take the clips down. Reported Its share price slid from about $248 to about $233 over the first three days, and outlets put the market value lost at anywhere from $1 billion to $3 billion.

Key dates

The Edict and the memecoin

The Edict read like a consumer-rights wish list: no digital pre-orders before a game is out and reviewed, no paying to unlock single-player content already in the game files, and offline play when servers shut down. Rockstar was also told to apologize publicly and pay restitution. Official GTA 6 pre-orders had opened on June 25, at $79.99 for the Standard Edition and $99.99 for the Ultimate Edition (what each edition includes).

Reported The money side was in plain sight. Every clip carried the ticker and QR code of the CyberLeek coin, which on-chain data reported by CoinDesk shows was created three days before the first leak. The watermarks promised more leaks as the coin's market cap rose: one clip was promised at $3 million, and holders voted on what leaked next.

Reported The website even offered advertising space on future leaks, for a contact fee of 400 Monero (about $165,000). For a while it worked: the coin peaked on August 23 at a market cap of roughly $23 million to $25 million, according to CoinDesk, TheStreet and Kotaku.

Stop Killing Games, the movement fighting for games that keep working, did not buy the crusade: it disowned CyberLeek on August 19 and told people not to send it money. Reported The persona still asked fans to protest outside Rockstar and Take-Two offices dressed as leeks, and on August 24 one fan actually turned up at Rockstar North in Edinburgh.

Take-Two's court action

Official Take-Two moved on day 3. On August 20, its lawyers at Kirkland & Ellis filed DMCA subpoena requests in Manhattan federal court against Microsoft, as GitHub's owner, and Discord, followed a day later by X Corp and Google, YouTube's owner. A DMCA subpoena lets a rights holder demand identifying details from online platforms without first filing a full lawsuit.

Official Microsoft was asked for account IDs, email and IP addresses, phone numbers, linked Xbox accounts, Windows device IDs and its own records on the CyberLeek persona. Discord was asked about members of servers linked to the leaks since June 1. Judges granted the Microsoft and Discord subpoenas on August 21 and the X subpoena on August 24, with deadlines of September 4 and 8.

Official On August 28, Take-Two asked the court to seal a second Discord request, saying its investigation was moving quickly and that it had identified one more Discord user. It withdrew the Google request the same day. The sealing request also described what the case is about:

…copyright infringement and the misappropriation of Take-Two's confidential information.

Take-Two Interactive, court filing, August 28, 2026

Official The sealed subpoena was granted on August 31, due September 14, in what became the last public filing. Every deadline passed with no motions, no compliance filings and no lawsuit on the public dockets.

Two caveats apply. These are civil copyright subpoenas, not a criminal case, and no police investigation has been publicly confirmed. Sealed work also never shows on a public docket, so a quiet record doesn't mean nothing is happening.

Rockstar's response

Until August 26, Rockstar said nothing in public. Reported On August 21, Bloomberg's Jason Schreier reported that Rockstar's leaders and many employees were angry, that an executive had emailed staff denouncing the leaker, and that the Netflix date would not move. Official The same day, Xbox chief technology officer Scott Van Vliet said Xbox was working closely with Take-Two and Rockstar.

Official Rockstar broke its silence on the morning of August 26, in a statement on X and Instagram. Its key line:

…heartbreaking for our team.

Rockstar Games, statement on X and Instagram, August 26, 2026

The studio added that this was not how it wanted fans to see the game, and that the game was nearly finished and still coming on November 19 (release date and platforms). Official An Extended Look premiered on Netflix the next day at 3 p.m. ET, about 26 minutes of official gameplay captured on PlayStation 5, and reached YouTube at 9 p.m. ET.

August 27: the cash-out and the silence

Reported CyberLeek's final clip on August 26 came with an on-screen message: the build was recent, the game was not ready, and more leaks would only come if the coin kept trading. The next morning, the money moved.

Reported At about 3:27 a.m. ET on August 27, the wallet that created the coin claimed the trading fees the coin had generated and sold a large block of tokens. On-chain analysis reported by CoinDesk puts the total at roughly $250,000 (outlets range from $250,000 to $270,000), most of it from fees. The money was split across four new wallets, with some sent to the KuCoin exchange and some through an anonymous swap service.

That tracing is analysts' work; neither Take-Two nor the police have confirmed it. Reported The coin crashed the same day, with reported falls ranging from 40% to 86%.

About 12 hours after the cash-out, An Extended Look premiered, and fans comparing it with the leaks concluded the leaked build looked older. Reported For the next six weeks, the real CyberLeek posted nothing: no new clip, no new demand.

What has (and hasn't) happened since

October: a "return" under the CyberLeek name. Reported On October 5, a poll appeared on CyberLeek's website, set to close on October 8. That day, a file of more than 370 MB with about 25 minutes of alleged GTA 6 gameplay surfaced online, attributed to CyberLeek. Dexerto stresses that the footage hasn't been independently verified, and that it's unclear whether it comes from the same person or group as the August leaks.

Reported On October 10, a gaming creator relayed on X a claimed threat: CyberLeek would release a build that can be played from start to finish unless its memecoin was revived, or Take-Two released GTA 6 on physical discs and apologized publicly. The same message threatened major story spoilers as proof. Nothing confirms that a complete build exists. Official Rockstar hasn't commented publicly on the October posts, and the November 19 release date hasn't changed.

Impersonators. Others kept the name alive. Rumor An X account posted an extra clip on the night of August 26, although CyberLeek had said it had no X account; a CyberLeek-branded countdown launched a brand-new coin on August 30; and on September 19 a Telegram channel announced a dead man's switch to release the full build. None can be tied to the original, and nothing has been released.

Fake builds. Tom's Hardware reported a 113 GB GTA 6 file that was 99.99% padding around a small program that switches off Windows Defender. Huntress and Malwarebytes found fake files and demo sites delivering remote-access trojans, a password stealer, Chaos ransomware and the Vidar infostealer.

Mix-ups. These separate incidents often get confused with CyberLeek:

The legal picture. Official As of October 3, there is no arrest, charge, lawsuit or confirmed identity in any public record, and the dockets have been quiet since August 31. The 2022 hacker, by comparison, was arrested four days after his leak. The coin sat about 97% below its peak on October 3, per CoinGecko. Next to watch: Take-Two's earnings call, expected in early November and its first since the leaks.

Our take: PC build, marketing stunt or cash grab?

Was it a PC build? Plausible, in our view, but unproven. Reported The claim began on August 20 with an X account that now carries a Community Note saying there's no public evidence, and no developer has gone on record by name. PC Gamer thought the footage probably ran on a PC, while former Rockstar North technical director Obbe Vermeij thought the build probably only runs on a devkit.

Official Rockstar has never said which hardware was involved, and GTA 6 is announced only for PS5 and Xbox Series X|S. Reported CyberLeek never verifiably claimed a PC build: the threat to release one to millions of players was a copycat's fake image, and Insider Gaming retracted its story on August 23. Either way, it says nothing about a PC release. Official Take-Two CEO Strauss Zelnick told Bloomberg in May that Rockstar starts on console, while noting PC can make up 45% to 50% of a big game's sales.

Was it Rockstar's own marketing? We see no evidence for it. The theory took off after a YouTube video on August 19, helped by the timing, the puns and the mild demands. Reported The leaks did work like marketing: analysts cited by CNBC saw no commercial damage, and PC Gamer suggested they made fans hungrier for the reveal.

But Take-Two went to federal court on day 3, told the court the case involved copyright infringement and misuse of its confidential information, and had the clips taken down. A secret campaign would have meant misleading a federal court while fans lost real money.

What it was, in our read: whatever CyberLeek said it stood for, the record points to an operation built around a coin. The coin existed before the first clip, the leaks were tied to its market cap, and the persona went silent the moment the money came out. Its October demands again start with reviving the coin. Bloomberg, Kotaku and GamesRadar were among the outlets that called it a crypto grift.

GTA 6 is still on track for November 19, 2026 (follow the countdown). For the game as Rockstar has officially shown it, start with our guides to the characters and the map of Leonida.

FAQ

Who is CyberLeek?

CyberLeek is the anonymous persona that leaked GTA 6 gameplay from August 18 to 26, 2026, while promoting a memecoin of the same name. No authority has confirmed who is behind it, and we don't repeat the unverified claims circulating online.

Is CyberLeek back?

Reported New footage appeared under the CyberLeek name on October 8, 2026, followed by a claimed threat to release a full playable build on October 10. Neither has been verified, and it isn't clear that the same person or group is behind them. Treat any download offered in its name as malware.

Has CyberLeek been arrested?

Not according to the public record: as of October 3, 2026, there has been no arrest, charge or lawsuit. The 24-year-old arrested in Amsterdam on September 15 was part of the separate ShinyHunters investigation.

How much money did CyberLeek make?

About $250,000, according to on-chain analysis reported by CoinDesk; outlets put it between $250,000 and $270,000. It came from the coin's trading fees and a token sale on August 27, though Take-Two and the police have not confirmed that tracing.

Was the GTA 6 leak a Rockstar marketing stunt?

There is no evidence for it. Take-Two filed federal subpoenas to identify the leaker and had the clips taken down, and Rockstar called the leaks heartbreaking for its team.

Can I download a leaked GTA 6 build?

No. There is no real leaked copy, and files shared as GTA 6 builds have been found to carry malware. GTA 6 launches November 19, 2026 on PS5 and Xbox Series X|S, with no PC version announced.

Did the leaks delay GTA 6?

No. Rockstar's August 26 statement kept the November 19, 2026 release date, and An Extended Look premiered as planned the next day. Reported Take-Two CEO Strauss Zelnick repeated the date at the September 17 shareholder meeting.

Sources

• Rockstar Games: Grand Theft Auto VI
• Rockstar Games: statement on X and Instagram (August 26, 2026)
• Rockstar Newswire: Grand Theft Auto VI: An Extended Look (August 6, 2026)
• Rockstar Support: GTA VI platforms
• U.S. District Court, S.D.N.Y.: In re Take-Two Interactive Software, Inc., 1:26-mc-421, 422, 425 and 426 (dockets via CourtListener)
• Bloomberg: Jason Schreier (August 21, 2026)
• Bloomberg: Strauss Zelnick interview (May 4, 2026)
• CoinDesk: on-chain analysis (August 27, 2026)
• Kotaku (August 18-27, 2026)
• PC Gamer (August 18-31, 2026)
• Forbes: Paul Tassi (August 20-25, 2026)
• Tom's Hardware (August 19-29, 2026)
• GamesRadar (August 18 - September 17, 2026)
• Dexerto live blog (August 2026)
• GameSpot leak timeline (August 26, 2026)
• Mashable (August 2026)
• Variety (August 6, 21 and 27, 2026)
• TorrentFreak (August 23 and 31, 2026)
• Insider Gaming: retraction (August 23, 2026)
• CNBC (August 28, 2026)
• CyberScoop (August 25, 2026)
• TheStreet
• Bitquery: on-chain data
• Obbe Vermeij: posts on X (August 22-24, 2026)
• Scott Van Vliet: post on X (August 21, 2026)
• Huntress: fake GTA 6 ISO research (September 9, 2026)
• Malwarebytes (August 2026)
• TechCrunch and The Register (September 29, 2026)
• Help Net Security (April 13, 2026)
• City of London Police; Court of Appeal (September 11, 2025)
• TheGamer (September 2026)
• Wolf's Gaming Blog and GTA Intel (September 19, 2026)
• CoinGecko market data (October 3, 2026)
• Dexerto: Calum Patterson (October 8, 2026)
• Dexerto: Zackerie Fairfax (October 10, 2026)

The GameSight team

We research GTA 6 from official sources and label every claim as official, reported or rumor. How we work · GameSight on YouTube