The GTA 6 leak of September 2022: what was in it, and how much of it held up

On Sunday 18 September 2022, more than ninety videos of Grand Theft Auto VI appeared on a fan forum, and Rockstar confirmed they were genuine the following day. It remains one of the largest leaks in the history of the games industry, and for the fourteen months until the first trailer it was the only footage of the game that existed in public.

It is worth revisiting now for a reason that does not apply to most leaks: it can be marked. The game is nine weeks from release, Rockstar has put one of the leaked missions on screen itself, and four years of official material have either confirmed what was in those files or quietly failed to. The result is unflattering to leaks in general. The 2022 material was authentic, and it was still a poor guide to the game now on sale for pre-order.

Nothing here links to leaked material, describes where to find it, or reproduces anything from it that Rockstar has not since shown publicly.

What happened, in order

The fourteen months between the leak and the announcement are the point of this article. Rockstar said nothing at all about the game itself until November 2023, and for that whole stretch almost every claim made about GTA VI was built on files that turned out to describe a small corner of it.

What was actually in the files

The videos were not a preview build and were never meant to be watched by anyone outside the studio. They ran with debug overlays and developer cameras visible, used placeholder assets in places, and a source with knowledge of the game's development told PC Gamer that most of them were likely to have been attachments to bug reports filed by QA testers. That is the single most useful fact about the leak and the one most often left out: a bug-report video is a recording of something going wrong, captured by someone whose job is to find the worst version of a scene.

Three other details establish how early the build was. The file names contained the word "Americas" — the project codename that had been reported since 2018. Some clips appeared to be running on a PlayStation 4 development kit, a generation below the consoles the game will launch on. And the footage was, by the reckoning of the outlets that examined it, already several years old when it was published. Rockstar has never confirmed the build's date.

What the clips showed was narrow. Two characters, addressed in dialogue as Lucia and Jason, robbing a diner together with the player controlling Lucia. A character riding something signposted as the Vice City Metro. Fragments of streets, interiors and test scenes. There was no map, no mission list, no script, no schedule.

Rockstar's statement

The confirmation came on 19 September 2022, posted to Rockstar's social accounts and its Newswire. The company said it had "recently suffered a network intrusion in which an unauthorized third party illegally accessed and downloaded confidential information from our systems, including early development footage for the next Grand Theft Auto", that it was "extremely disappointed to have any details of our next game shared with you all in this way", and that "our work on the next Grand Theft Auto game will continue as planned and we remain as committed as ever to delivering an experience to you, our players, that truly exceeds your expectations".

Read it again for what it does not contain. It does not say which files were taken, how many were genuine, or what state the build was in. Rockstar has never published an inventory of the leak, and the only footage from it the company has ever acknowledged as its own is the footage in that sentence: "early development footage". Every list of "everything confirmed by the GTA 6 leak" published since has been a fan reading of unlabelled video.

The court case, and what it cost

The investigation ran through the City of London Police and the FBI, and it ended at Southwark Crown Court. Arion Kurtaj, a member of the Lapsus$ group, was 17 at the time of the Rockstar breach and was found to have carried it out while under police protection in a Travelodge, after an earlier arrest — using, according to evidence given at trial, an Amazon Fire TV Stick, the hotel room television and a mobile phone.

Kurtaj was assessed as unfit to stand trial on account of acute autism, so the jury was asked only whether he had committed the acts, not whether he had done so with criminal intent. In August 2023 it found that he had, across attacks on Rockstar, Uber, Nvidia and BT among others. On 21 December 2023 he was given an indefinite hospital order: detention in a secure hospital until doctors judge he is no longer a danger, the judge citing an assessment that he still intended to return to cybercrime as soon as possible. A second Lapsus$ member, also 17, was convicted in the same trial and given an 18-month youth rehabilitation order.

Rockstar told the court the clean-up cost the company around $5 million and thousands of hours of staff time. That figure is the closest thing there is to an official measure of the damage, and it is a measure of remediation work, not of lost sales.

In July 2026 the BBC's cyber correspondent Joe Tidy reported that Kurtaj had left the secure hospital, was being held in an ordinary prison and was awaiting a retrial listed for November 2026 — the month GTA VI launches. That is reporting rather than a statement from the court or from Rockstar, and it should be read as such. Nothing further has been published since.

What the leak got right

Six rows, and the last one is the remarkable one. The diner sequence from the leak — Hank's Waffles, with "Open 7 Days" lettered on the front window — is in Rockstar's own 26-minute Extended Look, four years after it escaped as a bug report. Kotaku's side-by-side found the layout, the name and the window lettering unchanged, and everything else different: lighting, faces, weapon handling, and NPCs that no longer move like crash-test dummies.

So the leak was right about who and where. Both protagonists, both names, the setting, and one mission that survived four more years of development. For an unauthorised dump of QA footage, that is a real hit rate, and we set out what Rockstar has since published about the pair in the full confirmed cast and on Lucia's own page.

What it did not contain

Everything else.

• Leonida. The leak showed a city. The game is a state, and neither the name nor the idea existed publicly until the trailer of 4 December 2023. Every confirmed region — the Keys, Grassrivers, Mount Kalaga, Port Gellhorn, Ambrosia — is absent from the 2022 material.
• The cast. Every named character other than Jason and Lucia arrived with Rockstar's own bios in 2025 and 2026.
• The title. Rockstar did not say "Grand Theft Auto VI" until Sam Houser's announcement of 8 November 2023.
• The date. Nothing in the files pointed at 19 November 2026, or at any other date. The release date and its two delays were settled entirely by later Rockstar statements.
• How it plays. Character switching, the criminal profile, fuel and vehicle theft, the non-lethal option in combat: none of it is readable from the leak. All of it came from the Extended Look and from developer interviews in 2026.

The pattern is consistent. The leak was a window onto a few square metres of a game that turned out to be a state-sized one, and it was silent on scope, schedule and systems — which is to say, on everything people spent 2022 and 2023 arguing about.

The downgrade argument, settled

The most widely repeated conclusion drawn from the leak was that the game looked bad. A large number of people watched footage captured from an unfinished build on last-generation hardware and took it as a preview of the finished product; the word "downgrade" was applied to a game that had not yet been upgraded. Developers at other studios responded by posting embarrassing early builds of their own shipped games, which was the correct answer and did not stop the argument.

The Extended Look ended it, and ended it with the fairest possible test: the same mission, the same geometry, the same studio, four years apart. Nothing about the visual quality of GTA VI could be inferred from the 2022 files, and the one scene that exists in both versions proves it.

What is still not confirmed

The second-to-last row is worth stating plainly, because the two events are routinely merged into one story. They are not the same story.

The 2026 leaks are a different event, and a worse one

Footage began circulating again in the middle of August 2026, from a leaker using the name Cyberleek, and Rockstar acknowledged it on 26 August, calling it "heartbreaking for our team" and asking players to wait for 19 November. A clip from the story followed within hours.

The difference between the two is the difference between a leak of a game and a leak of a story. In 2022 the game was years from finished; watching the material cost you nothing but a misleading impression of the graphics. In 2026 the game is finished, and the material includes plot. That is why our advice is now defensive rather than academic, and it is all in the spoiler guide.

The legal response has diverged just as sharply. The 2022 intrusion was traced to a named individual within days; the 2026 one is being pursued through DMCA subpoenas served on Discord, Microsoft and X, nobody has been sued or charged, and the most recent filing is sealed — what Take-Two has asked the courts for is a matter of public record, and it is broader than the leaker's own accounts.

The short version

The September 2022 leak was real, Rockstar said so within a day, it cost the company about $5 million to clean up, and it put a teenager in a secure hospital. It also correctly named both protagonists, the setting and one mission — and got no closer than that to the game arriving on 19 November 2026. Four years of official announcements have added Leonida, nine named characters, two trailers, 26 minutes of gameplay and a release date, and not one of those things could have been guessed from ninety bug reports.

The lesson is not that leaks are inaccurate. This one was accurate. The lesson is that an accurate leak of the wrong thing tells you almost nothing, and that the four-year argument built on top of it was settled in a single afternoon by Rockstar showing the same diner.