GTA 6 Leaks Escalate as Hackers Incite Real-Life Harassment Against Developers

Nearly a week into the unprecedented Grand Theft Auto 6 data breach, the perpetrators show no intention of relenting. The unfolding crisis has forced developer Rockstar Games into uncharted operational territory. Meanwhile, the shadowy collective operating under the moniker “Cyberleek” has grown increasingly audacious, capitalizing on both anonymity and digital leverage.

Standard damage-control protocol dictates that publishers issue sweeping DMCA takedown requests to curb the propagation of confidential media. Take-Two Interactive, Rockstar’s parent company, has pursued this avenue aggressively, yet the materials remain stubbornly accessible. The core issue lies in the group’s dissemination architecture: Cyberleek is hosting the stolen data via Arweave, a decentralized, permanent data-storage protocol. Because files on Arweave are distributed and preserved across an immutable network of miners—akin to blockchain infrastructure—the repository is virtually impossible to eradicate once uploaded. This marks the first time a major video game breach has leveraged decentralized storage to evade copyright enforcement, leaving the publisher with little regulatory recourse.

This decentralized distribution has created some confusion among onlookers. Users attempting to access the primary portal are occasionally met with a notice stating, “Requested content blocked by this node’s content policy. Blocked ID: cyberleek.” However, this does not indicate that the website has been dismantled; rather, it merely reflects a single gateway filtering out the content. The underlying assets remain permanently etched onto the decentralized network and accessible through alternative gateways, explaining why fresh gameplay captures continue to surface unabated.

Rockstar and Take-Two have not remained passive. Following initial legal subpoenas targeting Microsoft and Discord to unmask the hackers, the publisher secured a court order compelling social media platform X to surrender identifying records. While corporate representatives maintain public silence, internal tensions have reportedly reached a boiling point. According to a report by Bloomberg, studio leadership is incensed over suffering a second catastrophic breach. Following the high-profile 2023 intrusion, Rockstar overhauled its internal cybersecurity defenses, yet those safeguards failed to thwart this latest intrusion. The vector of entry remains undetermined, leaving studio staff feeling demoralized and exhausted.

Since those revelations, the situation has devolved further. Cyberleek modified its communications portal to solicit paid advertising space and bespoke gameplay releases for a fee. The group has actively monetized audience participation: a recent gameplay sequence inside an in-game establishment was unlocked only after speculative trading propelled Cyberleek’s custom cryptocurrency to a $3 million market valuation—a threshold achieved within a matter of hours.

The group’s subsequent stunt escalated beyond financial extortion into real-world provocation. To authorize the release of an alleged “nude town” segment, the group imposed a bizarre condition: “To show support, at least 10 gamers need to show up dressed as leeks in front of Take2/Rock* offices holding game discs during working hours.”

While the hackers originally framed their campaign as ideological retaliation against Take-Two’s purported shift away from physical media discs, their actions have increasingly pivoted toward self-enrichment and public mockery. Whether supporters will orchestrate a physical demonstration outside developer facilities remains uncertain, though physical security concerns are very real; only months prior, an influencer was apprehended by law enforcement after attempting an unauthorized entry into Rockstar’s Edinburgh studio.