The 2022 GTA 6 Leak: A Complete History

In September 2022, a hacker named Arion Kurtaj stole and posted approximately ninety minutes of in-development gameplay footage from a Rockstar Games internal server. The leak was one of the largest video-game development breaches in history. Below: the complete factual history.

The leak (September 2022)

The footage appeared on the GTAForums on September 18, 2022, posted by an account called "teapotuberhacker." The clips totaled approximately 90 minutes and showed:

• Multiple gameplay sequences — driving, combat, dialogue
• Two protagonists — Lucia and Jason (then unnamed)
• A prison-yard sequence with Lucia
• A convenience store robbery with both protagonists
• A car-chase sequence
• Multiple Vice City locations
• The cellphone UI
• Various combat encounters and NPCs

The footage was immediately recognised as authentic — the rendering quality, GTA-engine signatures, character models, and level of detail were beyond any plausible mockup.

Rockstar's response

Within 48 hours, Rockstar Games:

• Confirmed the breach publicly via the official Newswire
• Filed a 10-K disclosure with the SEC documenting the security incident
• Issued takedown requests to YouTube, GTAForums, and other distributors of the leaked content
• Launched an internal investigation into the breach vector

The leak was acknowledged as real development material rather than fabrication — a significant statement that vindicated it as authentic.

The arrest and trial

UK authorities arrested Arion Kurtaj in September 2022 (he was already a person of interest in the Lapsus$ hacker group investigations). The Lapsus$ group had previously targeted Microsoft, Nvidia, Samsung, Ubisoft, and Okta.

Court proceedings:

• 2023: Kurtaj convicted in UK court of computer-misuse offences
• 2023: Sentenced to a hospital order (not prison; medical / psychological treatment)
• 2024-2026: Kurtaj remains under hospital order

The Lapsus$ broader case continued through 2024-2025; multiple other group members were prosecuted in the US and UK.

How the leak shaped marketing

The 2022 leak fundamentally changed Rockstar's GTA 6 marketing strategy:

• Trailer 1 (December 2023) arrived earlier than originally planned — Rockstar had to publicly establish what was confirmed before the leak set narrative inertia in the wrong direction
• The launch date had to be re-aligned around the public expectations the leak created
• The character names (Lucia, Jason) were confirmed earlier than originally planned
• The setting (Vice City) was acknowledged earlier than scheduled

Rockstar's internal document leaks indicated the original marketing plan was to delay confirmation of any in-game details until late 2024 or 2025. The 2022 leak forced a year+ acceleration of the confirmation timeline.

What the leak got right

A retrospective comparison of the 2022 leak vs the eventual official material shows the leak was highly accurate:

• Vice City as the setting — confirmed
• Two protagonists — confirmed (Lucia + Jason)
• The prison opening — confirmed
• The convenience-store robbery — confirmed (centerpiece of Trailer 2)
• The cellphone UI — confirmed (matches Trailer 2 phone-frame)
• Specific named characters (Cal Hampton, Boobie Ike, etc.) — confirmed
• The Leonida state — confirmed

The leak's batting average is remarkably high — most claims have been formally confirmed in later marketing.

What the leak didn't show

A few things the leak didn't include:

• The specific release date (November 19, 2026) — not in the leak
• The full mission catalog — only fragments
• The radio stations — none included
• The specific antagonists / story beats — limited
• Trailer 2's setpiece-level cinematic content — not in the leak

How the industry responded

The 2022 leak prompted industry-wide development-security audits. Major publishers (EA, Activision, Take-Two competitors) reviewed their internal-server access controls. The industry consensus shifted toward:

• Stronger access controls on development materials
• Compartmentalization of game-build access
• Explicit insider-threat training
• Faster response timelines for breach detection

The 2022 leak is now used as a case study in cybersecurity training across major publishers.

What Take-Two said about it

In Take-Two's earnings calls following the leak, CEO Strauss Zelnick:

• Confirmed the breach as real
• Stated the leak did not delay GTA 6 (a controversial claim that subsequent delays partially undermined)
• Emphasised the security improvements Rockstar implemented
• Avoided detailed comment on the stolen material specifically

The statement that the leak "did not delay GTA 6" is debatable — the eventual two delays from 2025 to 2026 had multiple causes, but the marketing acceleration the leak forced was likely a contributing factor.

What it means in 2026

Twenty-eight months after the leak, the 2022 leak is canonical in the broader GTA 6 conversation:

• Marketing acknowledges leak material implicitly
• Fan databases treat leaked details as likely-real-pending-confirmation
• The official Rockstar position is that any leak material is not authoritative until officially confirmed
• Practical reality is that the leak's batting average is so high that fans treat it as canonical even before formal confirmation

For the broader leak roundup, see GTA 6 Leak Roundup: Every Rumor, Rated. For the formal launch context, see GTA 6 Release Date Confirmed for November 19, 2026.