Who is Cyberleek? What's verified about the GTA VI leaks and Take-Two

Cyberleek is the name used by an actor (or group) that several outlets credit with publishing unauthorized material from Grand Theft Auto VI. On August 26, 2026, Rockstar officially acknowledged that gameplay videos from the game had leaked. The identity of the person responsible, how they obtained the material, and the claim that they control a playable build remain publicly unconfirmed.

What can be verified now includes that Rockstar response, plus four Take-Two legal proceedings tied to accounts or channels on Microsoft, Discord, Google and X; the takedown of one video, confirmed by YouTube; and reports of attempts to monetize the attention through a memecoin, advertising and Monero payments. The official statement confirms leaked gameplay videos, but it does not automatically turn every map, mechanic or storyline associated with Cyberleek into a fact about GTA VI.

Quick answer: what is verified

• The first posts that triggered this coverage circulated on August 18, 2026, and were attributed to the alias Cyberleek by PC Gamer, GameSpot and other outlets.
• Between August 20 and 21, Take-Two filed four DMCA subpoena requests directed at Microsoft, Discord, Google and X.
• Two judges ordered the clerk to issue the requested subpoenas for Microsoft and Discord.
• An exhibit in the Google docket includes a YouTube communication that marks one request as resolved and confirms the removal of a reported video.
• The exhibits in the X docket show only automatic confirmations that the platform received copyright complaints.
• There is no public record showing that any provider has handed over data capable of identifying a person.

How the case started

On August 18, PC Gamer reported on videos and images circulating as parts of the GTA VI map. GameSpot later reported that Take-Two was sending takedown requests. On August 26, Rockstar officially acknowledged that gameplay videos from GTA VI had leaked, but did not explain their origin, date or development version, and did not identify the person responsible.

The activity continued over the following days. GameSpot suggested that one of the posts could point to access to a playable build, but that conclusion is a journalistic inference, not a confirmation from Rockstar or Take-Two. A video edited to look like direct control also can't establish on its own when it was captured, what system it comes from, or whether it reflects the version that will ship.

What Take-Two's four dockets seek

Dockets 1:26-mc-00421, 00422, 00425 and 00426 request information tied to repositories, servers, channels and accounts that Take-Two links to material claimed under copyright. The requested categories include registration data, connection records, technical logs and the results of internal investigations that could help determine who controlled those accounts.

The procedural detail matters. Requesting a subpoena does not mean one has been issued; issuing it does not show the provider was served; and being served is not the same as handing over information. So far, the public records confirm the order to issue for Microsoft and Discord, but not an identification or compliance by the providers.

The Google and X dockets added new filings on August 24, but the full text was not available on RECAP during this check. Without that content, it can't be said what was decided or whether those subpoenas were actually issued.

Leonida HUB's legal story on the four cases tracks them in detail.

What YouTube, X and Discord said

The docket directed at Google contains a YouTube communication, dated August 21, indicating that a reported video was removed. This confirms a specific action on one claimed URL, not that YouTube handed over personal data or that all the material attributed to Cyberleek is authentic.

In X's case, the exhibits show only automatic acknowledgments for two copyright complaints. They do not confirm a takedown, service of the subpoena, or the delivery of records.

GamesRadar reported on August 24 that a Discord marketing director said the company had not yet received the subpoena and that, if it did, it would evaluate its validity and scope before responding. This is a statement attributed by the press, not a filing in the docket.

A takedown does not validate every leak

Take-Two's legal action is evidence that the company claimed rights over specific pieces of material. It does not support the conclusion that:

• everything shared under the same alias comes from Rockstar;
• the alleged map is complete or current;
• the inferred mechanics match the final version;
• there is ongoing access to a playable build;
• the actor's claims about their identity, method or future capability are true.

Rockstar's official statement confirms that gameplay videos leaked and warns of possible spoilers, but it does not individually validate maps, mechanics, build dates or storylines attributed to the actor. Any detail not found in the statement, on the official GTA VI page or in another primary source should still be treated as unconfirmed.

Memecoin, ads and Monero: why they affect credibility

GameSpot reported that the posts promoted a memecoin whose price rose and fell with the attention generated by the alleged leaks. The outlet described it as a pump and dump pattern, although it has not been publicly proven who controlled the wallets or what profits they made.

PC Gamer later documented an offer of advertising slots and a fee of 400 XMR just to start a commercial conversation. Financial incentives matter because they give an extra reason to exaggerate, drag out or fabricate news. That doesn't prove all the material is fake, but it means each claim has to be judged on its own and never on the alias's reputation.

Leonida HUB does not link to the memecoin, wallets, payment pages or channels controlled by the actor, and does not recommend sending money, downloading files or interacting with their posts.

What has happened since

• August 26. Hours after the statement, Cyberleek published a long clip of Lucia's prologue, the first story spoilers (Mashable). We do not link to it.
• August 27. The memecoin's creator cashed out hours before An Extended Look. CoinDesk estimates about $146,000 in fees and another $125,000 from the sale, based on independent blockchain analysis (CoinDesk).
• August 28. Take-Two requested a second, narrower subpoena to Discord: it says it has identified another user and has more data on one already flagged. Judge Andrew L. Carter granted it, and it is being handled under seal (PC Gamer).
• October 5. The website posted a poll with no readable content, and the original wallet moved again. It is not confirmed that this is the same person; voting closes on October 8 (Leonida HUB).

None of this changes the essentials: there is no public identity and no known arrest. The follow-up thread tracks each update.

So, who is Cyberleek?

The responsible answer is: we don't know. There is no publicly confirmed identity, nothing shows it is a single person, and there is no proven employment link to Rockstar or Take-Two. The four proceedings seek exactly the kind of information that could help answer part of those questions.

Even with an official statement about the leaked videos, three things should be kept apart: Rockstar acknowledges that GTA VI gameplay leaked; Take-Two's legal response is real and verifiable; and the identity, the access method and the other details built around the campaign remain individually unconfirmed.

The Confirmed vs Rumor master thread collects the updates in order without reproducing or linking to the claimed material.

Sources

Primary records, consulted on August 25, 2026:

• Microsoft: docket 1:26-mc-00421, CourtListener/RECAP.
• Discord: docket 1:26-mc-00422, CourtListener/RECAP.
• Google: docket 1:26-mc-00425, CourtListener/RECAP.
• X: docket 1:26-mc-00426, CourtListener/RECAP.
• Official GTA VI page, Rockstar Games.
• Official statement on the leaked videos, Rockstar Games, August 26, 2026.

Coverage used for context:

• Initial coverage, PC Gamer, August 18, 2026.
• Reported takedowns, GameSpot, August 19, 2026.
• Possible build access, presented as inference, GameSpot, August 21, 2026.
• Ad offer and Monero fee, PC Gamer, August 21, 2026.
• Memecoin follow-up, GameSpot, August 22, 2026.
• Statement attributed to Discord, GamesRadar via MSN, August 24, 2026.

Last editorial check: October 8, 2026.