Who is CyberLeek? The GTA 6 leaker, the memecoin and the impostors

What CyberLeek actually is

CyberLeek is a name, not a person anyone has identified. It is the watermark stamped across a run of unauthorized GTA 6 gameplay clips that started appearing on August 18, 2026, nine days before Rockstar's own Extended Look. It could be one person, a group, or a rebrand of something older. There is no public evidence tying it to the 2022 Rockstar network breach, which is the comparison most people reach for first. Treat every claim below as reported, not established.

We report that the leaks happened and what they showed. We do not host, mirror, embed or link to the footage or the site distributing it.

Where it posts, and where it does not

This is the part most coverage gets wrong. The material has spread through a site on an ar.io gateway, through Discord servers, and onto Reddit. The clips carry a CyberLeek watermark. On X, at least three accounts have claimed the identity: @MrCyberLeek, @cyberleek_ar_io and @cyberleekario. The problem is that one of the watermarks on the leaked material reads, in plain text, that CyberLeek does not have Twitter. That directly contradicts all three. None of them is verified, and none has demonstrated access to anything the original files can prove. So if you are following an X account for CyberLeek news, you are most likely following someone with no connection to the files at all.

The impostor accounts, and the AI fakes

It got worse than unverified. The @cyberleek_ar_io account posted AI generated images as though they were new GTA 6 material, then deleted them. That is the practical risk of this whole story for readers: the leak became a brand, the brand attracted impersonators, and the impersonators started manufacturing fake leaks to farm the attention. A meaningful share of what circulated as GTA 6 footage in late August was not GTA 6 at all. If you see a clip described as a CyberLeek leak, the base rate says check whether it came from an account that can prove anything before you believe it.

The memecoin, and the timing problem

CyberLeek promotes $CYBERLEEK, a token on Solana. The timing is the part worth sitting with. The token was already active by August 15. The first leaks went public on August 18. On that day alone roughly $11.8 million of it traded. The campaign says the money funds a secret project and protects the operation from corporate counterattacks. It has not said what the project is, who holds the funds, or how they are spent. A protest against corporate greed that launches a tradeable coin three days before the protest starts invites an obvious question, and nobody running it has answered it.

What the Edict actually demands

CyberLeek published a manifesto it calls the Edict, framing the leaks as a response to the monetization of games. Its three named objections are specific rather than vague: One, digital preorders sold before independent reviews exist. Two, single player content resold when it already sits in the base game files. Three, server shutdowns that remove access to games people paid for, citing The Crew's 2024 closure. The demand is that Rockstar issue a public statement, apologize, and make restitution, or the leaks continue. Those are real grievances that a lot of players share. That does not make the leaks a consumer rights campaign, and the coin makes the stated motive harder to take at face value.

What was actually in the leaks

Reported contents from the August 18 and 19 material include gameplay of Jason driving, fighting NPCs and playing basketball, a warehouse confrontation, a vehicle theft sequence, and a cutscene between Jason and Cal. There were also map images naming locations including Dalton Island, Tequesta Retreat, Gloriana Key, Catalan Key and Catalan Bay. Note that none of those location names appeared in Rockstar's official Extended Look, which named six regions: Vice City, the Leonida Keys, Grassrivers, Port Gellhorn, Ambrosia and Mount Kalaga National Park. Unofficial names from leaked images are not confirmed and may be old, cut, or wrong.

How old is this footage?

Possibly much older than the leak implies. Metadata on some of the material points to 2023, though old encoding tools can produce misleading metadata, so that is not proof on its own. Industry insider NateTheHate put the material at more than a year old. If that holds, the leaks show a build from the middle of development, not the game shipping on November 19. Judging the finished game by these clips is a mistake, and it is the mistake most of the reaction made.

How Rockstar and Take-Two responded

Rockstar did not blink publicly. It kept the August 27 Netflix premiere, kept promoting it, and issued takedowns rather than commentary. It later said publicly that the leaks have been heartbreaking for its team. Take-Two went to court. On August 20 it filed DMCA subpoenas in the U.S. District Court for the Southern District of New York, targeting Microsoft and Discord, seeking data to identify who is behind the persona. The scope of that request is broad enough to be its own story, and we have written it up separately.

How this differs from the 2022 hack

The 2022 GTA 6 leak was a network breach. Arion Kurtaj, a teenager and member of the Lapsus$ group, got into Rockstar's systems using a Fire TV Stick, a phone, a keyboard and a hotel TV, and 90 videos went out in a 3GB dump. He was arrested and Rockstar confirmed the breach. CyberLeek is a different shape: a sustained drip with a brand, a manifesto and a token attached, from a source nobody has identified and that no one has publicly tied to 2022.

What is still unknown

Who CyberLeek is. Whether it is one person or several. How the files were obtained. Whether the build is from 2023 or later. Who holds the token's funds. Whether any of the X accounts have any connection to the source at all. We will update this post as things are confirmed rather than filling the gaps with guesses. GTA 6 still launches November 19, 2026 on PS5 and Xbox Series X and S.