Take-Two Files Federal Subpoenas as GTA 6 Suffers Sixth Day of Gameplay Leaks

Grand Theft Auto 6 is less than three months away from its highly anticipated November 19, 2026 release, carrying the commercial weight of the entire gaming industry on its shoulders. But instead of executing a controlled, billion-dollar marketing rollout, parent company Take-Two Interactive is currently fighting a multi-front digital fire. The studio is facing one of the most sustained and brazen security incidents in modern entertainment history, as unauthorized footage continues to spill onto the internet just days before a major promotional event.[1][3]

For six consecutive days, a hacker or group operating under the pseudonym "CyberLeek" has systematically leaked in-development gameplay footage and the complete map of the game's fictional state of Leonida. The daily drip-feed of content has spread rapidly across social media platforms, leak boards, and dedicated Discord servers, overwhelming Rockstar Games' ability to issue immediate copyright takedowns. The sheer volume and consistency of the leaks suggest the perpetrators have access to a substantial, working build of the game rather than just a handful of recycled video clips.[1]

The breach represents a dangerous evolution in digital extortion and cybersecurity threats. The leaker is not simply dumping files into the public domain; they are actively weaponizing the internet's attention economy to maximize their leverage. The CyberLeek persona is currently running interactive polls on their website, requiring users to spend hundreds of dollars' worth of a specific cryptocurrency to vote on which gameplay video gets released next. This turns the leak into an interactive, highly monetized spectacle that actively incentivizes further breaches and complicates the studio's containment efforts.[1]

The leaked footage itself showcases various core mechanics from an in-development build of the game. Recent clips feature one of the game's two main protagonists, Jason, driving vehicles, interacting with non-playable characters, and navigating a gas station robbery that highlights new vehicle damage models and fuel systems. Other videos have shown taser gameplay and brief snippets of narrative cutscenes, raising internal fears that the hackers could eventually release the game's ending and spoil the story for millions of players worldwide.[1]

In response to the escalating crisis, Take-Two Interactive has deployed aggressive legal force to halt the distribution of its intellectual property. The publisher filed petitions in the US District Court for the Southern District of New York, securing federal subpoenas directed at major tech platforms including Microsoft, Discord, and X (formerly Twitter). The legal maneuvering utilizes the authority of the Digital Millennium Copyright Act to bypass lengthy traditional lawsuits and immediately compel these platforms to hand over sensitive user data connected to the offending accounts.[2]

The primary goal of these federal subpoenas is to strip away the digital anonymity of the CyberLeek persona and any associated collaborators. By forcing these platforms to surrender account IDs, IP addresses, phone numbers, and device identifiers, Take-Two aims to unmask the individuals hosting and distributing the copyrighted material. The publisher has submitted sworn declarations to the court confirming that the requested information will be used solely to protect its intellectual property rights and identify the alleged infringers before more damaging files, such as the game's source code, can be published online.[2]

Specifically, Take-Two's legal team is targeting specific Discord servers used to coordinate the viral spread of the leaks, as well as a GitHub repository—owned by Microsoft—that was utilized to host the files and direct users to the hacker's cryptocurrency ecosystem. A spokesperson for Discord has publicly stated that the company will review and comply with all valid subpoenas when received, signaling that the leakers' operational infrastructure is rapidly collapsing under the weight of federal scrutiny and corporate cooperation.[2]

The motivations driving the CyberLeek campaign appear to be a complex mix of financial greed and ideological posturing. On the financial front, the leaks are heavily monetized through a Solana-based memecoin that the hackers control. The group has embedded the token's contract address directly into the leaked videos as a permanent watermark, ensuring that every time a news outlet, content creator, or social media user shares the footage, they inadvertently advertise the cryptocurrency to a massive global audience, artificially pumping its market value.[1][3]

Simultaneously, the hacker has published a manifesto demanding an end to the video game industry's ongoing shift toward all-digital game sales and the elimination of physical discs. "They want to take your right to resell," reads one of the watermarks plastered across the stolen footage. By framing the extortion as a consumer rights crusade dedicated to the preservation of physical media, the leakers are attempting to garner sympathy from frustrated gamers, even as they hold one of the medium's most beloved and highly anticipated franchises hostage for their own financial gain.[1]

While the leaked footage is unpolished and clearly from an unfinished development build, its chaotic release severely disrupts a highly orchestrated promotional calendar. Rockstar Games had recently partnered with Netflix for an exclusive, six-hour premiere of a Grand Theft Auto 6 "Extended Look" trailer scheduled for August 27. The ongoing leaks threaten to overshadow this meticulously planned marketing beat, forcing the studio's executive team to divert critical resources toward legal damage control and server security rather than building anticipation for the official, polished reveal.[4][6]

This is not Rockstar's first experience dealing with catastrophic data theft and unauthorized exposure. In September 2022, a 17-year-old hacker named Arion Kurtaj, affiliated with the notorious Lapsus$ cybercrime gang, breached the studio's internal Slack channels and leaked 90 early development videos. That incident provided the public with an unprecedented, albeit unauthorized, look at the game years before it was ready to be shown, forcing the studio's leadership to publicly acknowledge the breach and reassure panicked investors that development would continue uninterrupted despite the massive security failure.[3][5]

The financial and legal fallout from that previous breach was immense. Rockstar later testified that the 2022 hack cost the company an estimated $5 million in recovery efforts and lost productivity. Consequently, Kurtaj was sentenced to an indefinite hospital order by a UK judge, who deemed him a high risk to the public due to his stated desire to return to cybercrime. The severity of that legal precedent underscores the extreme jeopardy the current CyberLeek operators face if unmasked.[3][5]

Despite the ongoing leaks and the internal frustration they cause, industry analysts expect the long-term commercial impact on Grand Theft Auto 6 to be negligible. The franchise's cultural gravity is absolute, and historical data suggests that early leaks rarely translate to lost sales for blockbuster titles. If anything, the unauthorized footage—while incredibly frustrating for the developers whose unfinished work is exposed—only serves to dominate social media algorithms and keep the game at the center of the cultural conversation ahead of its official November launch.[3]

However, the broader concern for the video game industry is the potential normalization of extortion-by-leak as a viable business model for cybercriminals. If the CyberLeek campaign successfully drives up the market capitalization for its associated cryptocurrency, it creates a highly lucrative financial blueprint for future cyberattacks. Major studios fear that hackers will increasingly target in-development projects not to sell the source code to rivals, but to hold the marketing cycle hostage while profiting off the resulting media frenzy, public curiosity, and speculative crypto trading.[3]

For now, Rockstar's strategy relies on a combination of rapid DMCA takedowns and aggressive federal subpoenas, attempting to plug the digital dam before the hacker can execute their ultimate threat: releasing the game's underlying source code or spoiling the narrative ending. As the November release date rapidly approaches, the studio finds itself in a high-stakes race against time, fighting to protect its intellectual property, unmask the perpetrators, and preserve the final surprises of a game that the entire world is waiting to play.[1][2][3]