Someone calling themselves Cyberleek has been publishing footage from Grand Theft Auto VI — a game that does not come out until 19 November.

The significant detail is not that footage exists. It is what the footage shows them doing.

It is a playable build, and they proved it

Early leaks could plausibly have been internal capture — recordings made by someone inside, passed along. Those, reportedly, were around a year old.

The recent material is different. In one clip the player shoots the word LEEK into a wall.

You cannot do that with a video file. Spraying letters onto a surface with gunfire is something a person does while playing, in real time, choosing where to aim. It is a signature that could only be produced by someone holding a working, unreleased build of the game and running it.

Alongside the clips, the entire map of Leonidas has been published.

What is being demanded

Cyberleek frames this as a protest. The stated grievance is Rockstar's pre-selling of digital copies and the industry's move away from physical releases, which they characterise as anti-gamer.

The stated condition for stopping is a public apology from Rockstar with, in their words, "a concrete commitment to be better."

Read that as a demand rather than as a slogan, because that is what it is, and notice its shape: there is no test for whether it has been met. An apology can always be judged insufficient, a commitment can always be judged insufficiently concrete. Whoever holds that condition decides when it is satisfied, and can decide never.

That is not a campaign with an objective. It is leverage with a moral vocabulary attached, and the threatened escalation — releasing the game's ending — is aimed at the audience the protest claims to represent.

The consumer argument is real; this is not how it is made

The underlying complaint is not silly. There is a genuine dispute about digital-only distribution, ownership and preservation, and it is being argued seriously elsewhere — including by people organising boycotts and by the wider backlash that has already blocked or delayed billions in industry projects.

None of that requires stolen property. And the cost of this particular method falls first on several hundred developers, artists and writers whose work is being published without their consent, years before they intended anyone to see it, in the least flattering form possible — out of order, out of context, unfinished.

Rockstar's position is bad in an unusual way

The company is issuing DMCA takedowns, heavily on YouTube. Clips persist on X. The leaker's site remains up, sometimes buckling to a 502 under its own traffic.

Takedowns work against a distribution point. They do not work against a person who holds the source material and has decided the releases are principled.

The obvious counter-move — release official footage and drown the leak — is reportedly constrained by a deal with Netflix, which is showing the third trailer from 27 August. So the marketing calendar, built to control attention, is currently preventing the company from responding to somebody else controlling it.

This is not the company's first incident this year: it was hit by a hack in April with threats to publish confidential data unless it paid.

What is not established

  • How Cyberleek obtained the build. No account, no vector, nothing confirmed.
  • Whether they are one person or several.
  • Whether the material is genuinely the full game. It looks like a working build; nobody outside can verify what else it contains.
  • Any connection to the April incident. Both involve the same company; nothing links them.
  • Whether the leaker's stated motive is their actual one. Stated motives in leak cases frequently are not.
  • What Rockstar or Take-Two will say publicly. Beyond takedown activity and legal filings, little.

Why this is on a security site

Because the interesting question is not what the game looks like.

It is that a complete pre-release build of the most anticipated product in its industry left the building, and nobody has explained how. Whatever the answer turns out to be — an insider, a compromised contractor, a supply chain, a breach — it is the same question every organisation with valuable unreleased material should be asking about itself.

The rest of it, the fake copies now circulating with malware inside and the subpoenas demanding data on thousands of uninvolved people, is what happens next.