Pretty much everyone is waiting for Grand Theft Auto VI (GTA 6). It’s been 13 years since GTA 5, which was the most profitable entertainment product of all time. Ahead of its scheduled November release, global preorders for GTA 6 have already hit $260 million. Analysts project it could sell as many as 51 million copies in its first week, potentially generating $3-to-5 billion in launch-week revenue.
Rockstar Games knows exactly how valuable their product is and constructed a strategic plan for showcasing GTA 6 to their eager (sometimes “feral”) fanbase.
So when GTA 6 footage started showing up online, it wasn’t just another game leak. It was a major hack of one of the most anticipated and potentially lucrative entertainment properties ever.
The trouble started on August 18, 2026.
A group calling itself CyberLeek began releasing roughly one piece of new GTA 6 footage every day. Cut scenes and car chases, graphics and gameplay that took years to develop and perfect, were unceremoniously dropped. By August 25, CyberLeek’s running tally included 14 gameplay videos and three map images.
Then, on August 27, Rockstar and Netflix released the official 27-minute extended look at GTA 6.
The two GTA 6 previews are now playing out simultaneously and in real time. And the fact is, CyberLeek got there first, stealing Rockstar’s thunder and making their leaks the bigger story.
Leaking as Guerrilla Marketing
What makes CyberLeek unusual isn’t simply the volume of footage. It’s how they’re using and profiting from it.
CyberLeek has effectively turned Rockstar’s intellectual property into its own branded content. They’ve added taunts and slogans promoting a memecoin. One clip reportedly carries the message “HIGHER MARKET CAP = MORE LEEKS.” Another appears to show protagonist Jason firing bullets into a wall to spell out “LEEK.”
CyberLeek has gone so far as to publish a manifesto attacking digital-only games, disappearing single-player content, and games without physical releases. They’ve even threatened other publishers that they could be next.
This isn’t just a stolen file quietly appearing online. It’s a pirate marketing campaign. CyberLeek has filched Rockstar’s content, put their name on it, and wants viewers to find it.
More frustratingly, CyberLeek’s bragging doesn’t help Rockstar figure out where the leak came from. Everyone knows who’s posting the videos, but not how they got them.
Starting an investigation after the GTA 6 leak
Rockstar Games’ parent company Take-Two moved quickly. Within days, they pursued subpoenas against Discord, Microsoft, X, and Google/YouTube, looking for any records that could connect online accounts to real-world identities.
The problem is, Take-Two can only work backwards through the massive infrastructure surrounding the leak. It’s looking for needles in a haystack of platforms, accounts, messages, and IP logs.
And even if they find something, it will never be as quick or conclusive as evidence coming from the leaked asset itself.
Controlled release vs. chaos
The difference between an official release and a leak is pretty obvious.
Rockstar’s official Extended Look was deliberately controlled. The company curated the footage, picked the capture environment, chose the distribution channels, and planned the release date.
The CyberLeek releases were just the opposite: Rockstar had no control over anything. The leaked footage was uploaded then re-uploaded across multiple platforms. Even after the company started sending out takedown notices, it became a game of whack-a-mole, with no way to establish a chain of custody.
A single leak was all it took for Rockstar to lose control over the release of its billion-dollar flagship property. And without any provenance, catching and holding the leaker accountable becomes incredibly difficult.
That’s the problem forensic watermarking is designed to solve.
The fix has to live in the asset, not the aftermath
Rockstar Games has around 4000 employees across 10 studios. With builds circulating across QA teams, contractors, playtesters, and partner studios, leakage is close to inevitable. And if CyberLeek’s brazenness shows anything, it’s that determined leakers aren’t stopped by takedown notices.
Once a clip surfaces, nobody can just look at it and immediately know which specific copy it came from. Currently, the video game industry’s best tools are crowd-sourced crypto-sleuthing and court subpoenas: slow, indirect, and mostly dependent on the leaker’s own mistakes.
Invisible, per-recipient watermarking changes that. When every build sent out during development carries its own imperceptible signature, the footage itself tells you where it came from. You know instantly which person or team was the source of the leak. No more requesting subpoenas or hoping the leaker slipped up.
More importantly, it forces the potential leaker to think hard before they hit “upload.” When the content itself will give them away, that’s a significant risk, and a major deterrent.
CyberLeek wants everyone to know they have GTA 6 files, and so far they’ve managed to stay one step ahead of Take-Two. Forensic watermarking shares all the details CyberLeek doesn’t want anyone to know: who they really are and where they’re getting their leaks from. When what you need to catch a leaker is in the file itself, you don’t have to chase them anymore.