REPORTED
A named publication describes the material or filing. The linked article is shown directly beneath the claim.
VICEWIRE SPECIAL REPORT // AUDITED AUG 22, 2026
THE
CYBERLEEK
FILE.
What the reported footage contains, how the dead-man-switch story moved from theory to a withdrawn report, what remains unproved, and exactly where each fact comes from.
- REPORTED CLIPS
- AT LEAST 6
- RUMOR CHECK
- WITHDRAWN
- OFFICIAL CHECK
- AUG 27
LIKELY PROTECTED MATERIAL.
NO FEATURE CONFIRMATION.
Separate outlets report responsive in-game behavior, repeated copyright removals, and Take-Two's formal effort to identify the alleged infringer. That makes a genuine-material explanation credible. It does not establish build age, completeness, or launch features.
EVIDENCE BEHIND THIS VERDICT
REPORTING IS NOT CONFIRMATION.
Every assertion below carries its evidence beside it. ViceWire separates what an outlet reported seeing, what can reasonably be inferred, and what Rockstar has authenticated.
INFERENCE
ViceWire connects multiple reported facts. The inference is labeled and never rewritten as a Rockstar statement.
OFFICIAL
A Rockstar source establishes the date, product detail, or feature. This is the only route into the confirmed ledger.
01 // REPORTED MATERIALWHAT OUTLETS SAY
WHAT OUTLETS SAY
THE FOOTAGE SHOWS.
These are paraphrased observations from published reporting. ViceWire does not host the clips, but it does tell readers what the coverage actually says.
Jason, a basketball, and free-roam violence
PC Gamer reports Jason shooting a basketball beside a house recognizable from Rockstar's trailers, plus a separate sequence involving a civilian. These descriptions support continuity with known official imagery; they do not prove the footage's build date.
SOURCES FOR THIS CLAIM
Police motorcycle and Allied Crystal raid
PC Gamer reports a police-motorcycle theft leading to an encampment beneath a freeway, and a nighttime refinery raid using a stun weapon before a truck theft.
SOURCES FOR THIS CLAIM
Car-entry, social, inventory, and healing prompts
The August 19 report describes a quiet car-entry option, greet-or-taunt choices, body looting, separate item and weapon wheels, and a healing item's diminishing effect. These are observations from alleged development footage, not confirmed features.
SOURCES FOR THIS CLAIM
Plane footage and LEEK written in bullet holes
GamesRadar and PC Gamer describe footage that deliberately writes the campaign name inside the game. That responsive act is the strongest public clue of playable access, while build custody and completeness remain unknown.
SOURCES FOR THIS CLAIM
Boat scene, police pursuit, plane footage, map, and car destruction
Axios catalogues a boat cutscene, a car theft followed by a police pursuit and rooftop gunfire, voted-on plane footage, apparent Leonida map material, and a later supercar-destruction sequence. Axios also says Rockstar had not authenticated the footage.
SOURCES FOR THIS CLAIM
02 // RUMORS, MONEY & LAWTHE PART BEYOND
THE PART BEYOND
THE GAMEPLAY.
The dead-man-switch story moved from explicit community theory to a publisher article that was withdrawn. Earlier reporting also records demands, token promotion, legal action, and market movement. Each is graded separately so repetition never becomes proof.
REPORT WITHDRAWN. NO AUTHENTICATED STATEMENT OR SYSTEM EVIDENCE.
An August 20 community post framed the arrest-and-timer idea as a theory with no proof. Insider Gaming carried a purported Cyberleek statement on August 22, then withdrew the article; the original URL now returns HTTP 410. No cited source verifies a complete build, remote copies, automation, or a delivery path.
NO DIGITAL PREORDERS · NO BASE-FILE DLC RESALE · OFFLINE FALLBACKS
PC Gamer reports these as the manifesto's stated rules. They are the operator's claims, not ViceWire policy and not verified motives.
SOURCES FOR THIS CLAIM
TOKEN-HOLDER POLLS SELECTED A REPORTED CLIP
PC Gamer says the token was used for polls that chose what would be released next and reports a $1.1 million market cap at its publication time. That number is historical, volatile, and not an endorsement or current valuation.
SOURCES FOR THIS CLAIM
AXIOS REPORTED A TEMPORARY $2 BILLION TAKE-TWO MARKET-CAP DROP
Axios says the value later rebounded. Timing alone does not prove the leaks caused the full move, so ViceWire does not present this as a loss attributable solely to Cyberleek.
SOURCES FOR THIS CLAIM
MILLIONS OF VIEWS ACROSS MAJOR SOCIAL PLATFORMS
Axios reports millions of views across X, YouTube, and TikTok. It does not provide one consolidated audited total, so ViceWire does not invent a precise number.
SOURCES FOR THIS CLAIM
MICROSOFT + DISCORD RECORDS REPORTEDLY DUE SEPTEMBER 4
GamesRadar reports DMCA subpoenas seeking account, login, linked-account, device, and relevant storage records. A request for records is not proof of the operator's identity or guilt.
SOURCES FOR THIS CLAIM
03 // DATED EVENT LEDGERTHE FULL
THE FULL
CHRONOLOGY.
Each event includes the reporting basis and the exact source links used for that entry.
- 01AUG 18REPORTED
FIRST RELEASESCORROBORATED REPORTING Two purported clips and a manifesto appear.
PC Gamer reports that an unidentified person or group using Cyberleek began releasing footage on August 18. Its overview describes Jason shooting a basketball outside a house already seen in official trailers and a separate violent free-roam sequence. The accompanying manifesto demanded an end to digital preorders, paid single-player DLC already present in base files, and single-player games without an offline fallback.
WHY THESE SOURCES ARE ATTACHEDStart date and reported clip contents: PC Gamer overview. Three manifesto demands and claimed campaign motive: PC Gamer manifesto report.
SOURCES FOR THIS CLAIM - 02AUG 19REPORTED
TWO MORE CLIPSONE OUTLET, MULTIPLE OBSERVATIONS A police-bike sequence and refinery raid are reported.
PC Gamer describes one sequence in which Jason takes a police motorcycle, enters an encampment, and fights people there. It describes another at an Allied Crystal refinery where Jason uses a stun weapon and steals a truck. Reporters also noted prompts for quiet car theft, greeting or taunting NPCs, body looting, a separate item wheel, and a healing item with reduced effect after repeated use. Rockstar had not confirmed any of these as launch systems.
WHY THESE SOURCES ARE ATTACHEDAll scene and interface observations come from PC Gamer's August 19 report, which labels the footage legit-looking but unconfirmed and warns that AI-generated fakes are circulating.
SOURCES FOR THIS CLAIM - 03AUG 20LIKELY
BUILD-ACCESS SIGNALMULTI-SOURCE INFERENCE A deliberate in-game message changes the authentication case.
GamesRadar and PC Gamer report footage that moves from a plane flight over the city to Jason placing bullet holes that spell LEEK on a wall. Because the message responds to the campaign identity inside the game world, both outlets treat it as evidence of access to something playable rather than a cache of prerecorded tester clips. Neither source establishes whether the operator holds the build directly, how large it is, or how old it is.
WHY THESE SOURCES ARE ATTACHEDThe LEEK wall action and playable-build inference are reported independently by GamesRadar and PC Gamer. PC Gamer notes a radio track released in January 2025 as a weak recency clue, not a build date.
SOURCES FOR THIS CLAIM - 04AUG 21ON RECORD
SIXTH CLIP + LEGAL RESPONSENEWS + LEGAL REPORTING The count reaches at least six as Take-Two seeks records.
Axios and PC Gamer count at least six purported clips by this point. GamesRadar reports that Take-Two filed DMCA subpoenas in the Southern District of New York seeking Microsoft and Discord records to identify the alleged infringer. The requested categories reportedly include registration and login data, linked accounts, device identifiers, and relevant OneDrive content, with responses due September 4.
WHY THESE SOURCES ARE ATTACHEDClip count: Axios and PC Gamer. Filing date, purpose, record categories, recipients, and response date: GamesRadar's report on the subpoenas.
SOURCES FOR THIS CLAIM - 05AUG 22BOUNDARY SET
VICEWIRE AUDITVICEWIRE INFERENCE Likely protected material; no feature confirmation.
ViceWire's judgment is that the campaign likely contains protected Rockstar material because separate outlets report responsive in-game behavior, repeated copyright removals, and a formal rights-enforcement response. This is an inference, not a Rockstar authentication. A genuine development build can still be old, incomplete, selectively presented, or mixed with false reposts.
WHY THESE SOURCES ARE ATTACHEDThis is ViceWire's synthesis of August 19 to 21 reporting. Axios says Rockstar had not confirmed the footage; PC Gamer says the studio had not commented on its source or legitimacy.
SOURCES FOR THIS CLAIM - 06AUG 20THEORY
EARLY COMMUNITY THEORYDATED COMMUNITY POST The arrest-and-timer idea appears as explicit speculation.
A GTA6unmoderated post asks whether Cyberleek could have a timer that releases material after an arrest or loss of access. The author explicitly says there is no proof. This establishes that the version now circulating as a quote was already a fan theory two days before the withdrawn article appeared.
WHY THESE SOURCES ARE ATTACHEDThe dated post is evidence of the rumor's public chronology, not evidence that a switch exists or that the operator made the claim.
SOURCES FOR THIS CLAIM - 07AUG 22WITHDRAWN
MISINFORMATION CORRECTIONARCHIVE + LIVE URL CHECK A report carries the purported threat, then is withdrawn.
Insider Gaming briefly published a statement attributed to a Cyberleek website, claiming copies of a complete build were distributed and that a release was canceled manually each morning. The article was later withdrawn; its original URL now returns HTTP 410. ViceWire found no authenticated operator statement supporting it. Even the archived wording does not specifically say arrest, does not describe someone initiating a switch after arrest, and does not promise a free release.
WHY THESE SOURCES ARE ATTACHEDThe Internet Archive preserves the withdrawn article. The live article URL returned HTTP 410 during ViceWire's August 22 audit. Mashable separately documents impersonators and disputed schedules, while the August 20 Reddit post shows the arrest-and-timer idea circulating earlier as unproved theory.
- 08AUG 27ROCKSTAR
OFFICIAL CHECKPOINTPRIMARY SOURCE Rockstar supplies the first primary comparison point.
Rockstar's own notice schedules Grand Theft Auto VI: An Extended Look for August 27 at 3 p.m. ET on Netflix, followed by the official Rockstar Games YouTube channel and GTA VI site at 9 p.m. ET. Only details shown or stated by Rockstar move into ViceWire's confirmed ledger.
WHY THESE SOURCES ARE ATTACHEDDate, times, and channels come directly from Rockstar's Newswire announcement and GTA VI hub.
SOURCES FOR THIS CLAIM
WHAT THE EVIDENCE
DOES AND DOES NOT PROVE.
The grade, reasoning method, and source trail sit together. No reader should have to hunt for the basis of a verdict.
A coordinated campaign began on August 18
PC Gamer dates the first releases and manifesto to August 18; later reports track continuing releases.
SOURCES FOR THIS CLAIM
The operator had access to playable material
The reported LEEK wall action is responsive to the campaign and difficult to explain as a passive archive, but custody and access method remain unknown.
SOURCES FOR THIS CLAIM
Every circulating clip is genuine
Both PC Gamer and Axios warn that Rockstar has not authenticated the clips; PC Gamer separately reports AI-generated fakes circulating beside plausible footage.
SOURCES FOR THIS CLAIM
Observed mechanics will ship at launch
Reported prompts and systems come from alleged development footage and do not appear as confirmations in the cited Rockstar material.
SOURCES FOR THIS CLAIM
The promoted token funds a legitimate project
Reporting records the operator's fundraising claim and poll mechanism, but supplies no audited use-of-funds evidence.
SOURCES FOR THIS CLAIM
Take-Two is seeking identifying records
GamesRadar reports DMCA subpoenas to Microsoft and Discord, including the stated identification purpose and requested record categories.
SOURCES FOR THIS CLAIM
Cyberleek said an arrest would trigger a free release
The arrest-and-timer version appeared earlier as explicit community theory. The later article attributing a related statement to Cyberleek was withdrawn and now returns HTTP 410; even its archived wording did not specifically say arrest or free distribution.
A working release switch and complete distributed build exist
No cited source demonstrates the build, remote copies, timer, automation, or delivery mechanism. A withdrawn claim is not technical proof.
SOURCES FOR THIS CLAIM
WHAT NOBODY
HAS ESTABLISHED.
- Who is operating the Cyberleek and LEEK identities
- How access was obtained and whether it continues
- Whether the operator directly holds a build or receives footage from someone else
- Whether the material comes from a full build or a limited slice
- Whether any distributed copies, automated trigger, or complete-build release mechanism exists
- The exact age and development branch of each purported clip
- Whether every repost preserves authentic, unaltered footage
- Which observed systems, if any, will exist in the release build
HOW NOT TO
GET PLAYED.
- Treat every alleged full-build download as a malware, credential-theft, and privacy risk.
- Do not download executables, archives, APKs, browser extensions, or alleged builds.
- Do not connect a wallet, buy a token, or treat market activity as proof of authenticity.
- Do not repost story material without an explicit spoiler warning.
- Do not publish identity speculation, private records, or doxxing material.
- Use Rockstar's own channels as the final confirmation boundary.
NEXT PRIMARY-SOURCE CHECKAUG 273 PM ET · NETFLIX
9 PM ET · ROCKSTAR
9 PM ET · ROCKSTAR
ROCKSTAR'S EXTENDED LOOK.
Rockstar's announcement supplies the date, times, and channels. After it airs, ViceWire can compare official material against this ledger without treating any leak as confirmation.
PRIMARY SOURCES
EVERY SOURCE
IN THE FILE.
The links are repeated here as a complete index, but the important change is that each one now also appears beside the exact claim it supports.
01
INDEPENDENT REPORTING // AUG 20, 2026PC Gamer: Who is Cyberleek? What we know about the GTA 6 leaker
↗02Start date, six-clip count, reported clip contents, playable-build inference, recency clue, token use, and unresolved identity questions
INDEPENDENT REPORTING // AUG 18, 2026PC Gamer: GTA 6 leaker says they will not stop until Rockstar and Take-Two apologize
↗03The manifesto, its three stated demands, the claimed fundraising purpose, and the absence of a publisher statement at publication time
INDEPENDENT REPORTING // AUG 19, 2026PC Gamer: More GTA 6 leaks reveal new details
↗04Two additional reported clips, DMCA removals, observed locations, actions, prompts, inventory behavior, and explicit authenticity caveats
INDEPENDENT REPORTING // AUG 20, 2026GamesRadar+: New footage suggests leaker has access to a playable build
↗05Plane footage, the deliberate LEEK wall message, DMCA removals, and limits on what can be inferred about build age or completeness
LEGAL REPORTING // AUG 21, 2026GamesRadar+: Take-Two subpoenas Microsoft and Discord
↗06Reported August 20 DMCA subpoena filings, requested account-record categories, the September 4 response date, and the sixth-clip context
INDEPENDENT REPORTING // AUG 21, 2026Axios: The GTA 6 leaks are speeding ahead without an exit in sight
↗07At-least-six count, reported clip and map contents, publisher non-response, social reach, temporary market-cap movement, and authenticity caveats
WITHDRAWN REPORT ARCHIVE // AUG 22, 2026Insider Gaming via Internet Archive: Withdrawn report: GTA 6 leaker threatens to give build to millions of gamers
↗08Preserves the report that carried the purported statement before withdrawal; the original Insider Gaming URL now returns HTTP 410
EARLY COMMUNITY THEORY // AUG 20, 2026Reddit / GTA6unmoderated: Dead Man's Switch Theory
↗09Shows the arrest-and-timer version circulating two days earlier as explicit community speculation whose author said there was no proof
SOURCE-HYGIENE REPORTING // AUG 20, 2026Mashable via Yahoo: What is CyberLeek? Everything we know about the alleged GTA 6 leakers
↗10Documents active impersonator accounts, disputed leak schedules, and the need to distinguish operator-attributed channels from copycats
PRIMARY SOURCE // AUG 6, 2026Rockstar Games: Grand Theft Auto VI: An Extended Look
↗11Primary-source schedule: August 27 at 3 p.m. ET on Netflix and 9 p.m. ET on Rockstar channels
PRIMARY SOURCE // LIVE OFFICIAL FILERockstar Games: Grand Theft Auto VI official hub
↗Primary baseline for material Rockstar has chosen to publish and authenticate