{ "id": "0854f983-644c-4c7c-ac0b-d89ff3a33b0b", "created_at": "2026-04-06T00:18:54.689811Z", "updated_at": "2026-04-10T13:12:07.458366Z", "deleted_at": null, "sha1_hash": "b1656d01276ba81b5f593fb53dfc6dd51127d649", "title": "Grand Theft Auto 6 leak: who hacked Rockstar and what was stolen?", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 43125, "plain_text": "Grand Theft Auto 6 leak: who hacked Rockstar and what was\r\nstolen?\r\nBy Keza MacDonald\r\nPublished: 2022-09-19 · Archived: 2026-04-05 17:32:59 UTC\r\nWhat has happened?\r\nIn the early hours of 18 September, a poster on GTAForums going by the name teapotuberhacker posted about 90\r\nvideos, totalling 50 minutes of footage from an in-development version of forthcoming video game Grand Theft\r\nAuto 6, from Rockstar Games. The footage has since proliferated around social media and the wider internet.\r\nShortly after the initial announcement, the hacker left a message on the forum claiming they wanted to “negotiate\r\na deal” with Rockstar for the return of unreleased data – including the source code for Grand Theft Auto 5 and the\r\nin-development version of Grand Theft Auto 6.\r\nA large amount of clearly work-in-progress gameplay, from all stages of development. Some of the footage is\r\nsimple short clips of animation tests: one such video shows a figure leaning out of the window of a car armed with\r\na rifle, aiming in a smooth circle. In others, characters alternately walk and run to test animation progressions.\r\nOther videos are more detailed. In one, a female player character holds up a diner, pointing a pistol at the cashier\r\nwho places stacks of dollars on the counter, before the player picks up the money and moves on. The scene is\r\nvoice-acted and fluidly animated, but still unpolished, with character models and scenery having none of the detail\r\nexpected from a finished game.\r\nEven given the unfinished nature of the clips, with debug commands and technical information overlaid, the\r\nleaked footage appears to confirm many reported details about the game, including the presence of a female\r\nplayable character in the single-player campaign for the first time, and the setting of modern-day Vice City, the\r\nGTA world’s equivalent of Miami, which featured in 2002’s Grand Theft Auto: Vice City.\r\nIs it genuine?\r\nYes, according to our sources – and besides, it would be difficult to fake the sheer quantity of work involved\r\nwithout devoting significant resources. GTA publisher Take-Two Interactive has acknowledged the leak, and has\r\nbeen sending takedown requests to YouTube under The Digital Millennium Copyright Act, affirming that the\r\ncompany holds the copyright to the posted footage.\r\nWhere did it come from?\r\nThe hacker says the footage was obtained by breaking into Rockstar’s Slack channel, the communication platform\r\nused for internal collaboration. The 90 videos were posted there, he says, and were easily downloaded.\r\nWho leaked it?\r\nhttps://www.theguardian.com/games/2022/sep/19/grand-theft-auto-6-leak-who-hacked-rockstar-and-what-was-stolen\r\nPage 1 of 3\n\nTeapotuberhacker also claims responsibility for a recent Uber data breach, and the techniques used appear similar.\r\nIn both cases, the messaging app Slack was a major point of entry, where it’s likely that information shared\r\nbetween staff members was used to gain further access to sensitive data. But the Rockstar hack appears less\r\nserious than the Uber attack, which involved the attacker gaining administrative access to the entire network, even\r\nbeing able to control the initial response to the hack itself through total control of the Slack account.\r\nIn Rockstar’s case, the hacker seems to want to shake down the company. As well as the videos, which have\r\nalready been posted to YouTube as proof of the attack, he claims to have source code for GTA 5 and GTA 6\r\ndevelopment builds, and appears to be blackmailing the developer for it.\r\nWhat is source code?\r\nThe actual code used to create a piece of software, which contains all the instructions that make a game function.\r\nThe unauthorised release of source code for a game such as GTA 5 or 6 has a number of consequences, none of\r\nwhich are pleasant for a company such as Rockstar. The most immediate outcome would be a further stream of\r\ninformation about the forthcoming game, as players are able to analyse the code for hints of features and content\r\nnot visible in the posted videos. Depending on the completeness of the code that was stolen, it may even be\r\npossible to actually compile it into a playable piece of software, although it would probably be far from a fully\r\nfeatured game.\r\nIn the longer term, the release of source code for games such as GTA risks revealing trade secrets of craft or\r\nengineering talent that have real value, and increasing the chance of pirated or knockoff versions of the game\r\nbeing created and distributed.\r\nWhat has Rockstar done about it so far?\r\nParent company Take-Two has issued takedown notices to social media accounts, YouTube channels and other\r\nsites posting the stolen footage. GTAForums, where the leak originally surfaced, and the GTA subreddit both\r\nclaim that Take-Two has instructed them to take down posts and links related to the leak. The original GTAForum\r\nthread started by teapotuberhacker was removed then relaunched with all links and GTA 6 details removed.\r\nIn a statement posted to Twitter, Rockstar said: “We recently suffered a network intrusion in which an\r\nunauthorised third party illegally accessed and downloaded confidential information from our systems, including\r\nearly development footage for the next Grand Theft Auto. At this time, we do not anticipate any disruption to our\r\nlive game services nor any long-term effect on the development of our ongoing projects.\r\n“We are extremely disappointed to have any details of our next game shared with you all in this way. Our work on\r\nthe next Grand Theft Auto game will continue as planned and we remain as committed as ever to delivering an\r\nexperience to you, our players, that truly exceeds your expectations. We will update everyone again soon and, of\r\ncourse, will properly introduce you to this next game when it is ready. We want to thank everyone for their\r\nongoing support through this situation.”\r\nWhy is this such bad news for Rockstar?\r\nhttps://www.theguardian.com/games/2022/sep/19/grand-theft-auto-6-leak-who-hacked-rockstar-and-what-was-stolen\r\nPage 2 of 3\n\nAny information about a game this big is very tightly controlled, and a leak of this magnitude is almost\r\nunprecedented. There will be financial consequences, as Rockstar investigates the leak and likely evaluates\r\nworking practices. Publisher Take-Two may well face a dip in its stock value as well as uncomfortable questions\r\nfrom shareholders.\r\nAnd in terms of reputation, this will negatively affect how Grand Theft Auto 6 – likely to be the biggest game of\r\nall time, when it is eventually released – is perceived. In-progress game footage is unfinished, obviously, and not\r\nrepresentative of the quality that the developers will be striving to achieve. We are already seeing the footage\r\nbeing torn apart on social media and on forums by ill-informed users taking issue with its perceived quality and\r\ncontent.\r\nHow has the games industry reacted?\r\nWith a mixture of shock and sympathy. Neil Druckmann, co-president of Uncharted developer Naughty Dog,\r\ntweeted, “To my fellow devs out there affected by the latest leak, know that while it feels overwhelming right\r\nnow, it’ll pass. One day we’ll be playing your game, appreciating your craft, and the leaks will be relegated to a\r\nfootnote on a Wikipedia page. Keep pushing. Keep making art.” Similarly supportive messages have come from\r\nindie developer Rami Ismail, Xbox corporate vice-president Sarah Bond, and Gears of War creator Cliff\r\nBleszinski.\r\nWhat’s next?\r\nThe hacker has been using social media platforms to seek a response from Rockstar and is clearly hoping to sell\r\nthe unpublished data back. It’s unlikely we’ll ever find out if the company makes such a deal. From its\r\nannouncement it looks like Rockstar is hoping to ride out the crisis, but it’s likely an investigation into the source\r\nof the hack has begun. There has been no further response so far from the hacker, but if the source code is released\r\nthis will be even worse for Rockstar, as it will make the game vulnerable to further hacks and exploits when it\r\nlaunches.\r\nSource: https://www.theguardian.com/games/2022/sep/19/grand-theft-auto-6-leak-who-hacked-rockstar-and-what-was-stolen\r\nhttps://www.theguardian.com/games/2022/sep/19/grand-theft-auto-6-leak-who-hacked-rockstar-and-what-was-stolen\r\nPage 3 of 3", "extraction_quality": 1, "language": "EN", "sources": [ "MITRE" ], "origins": [ "web" ], "references": [ "https://www.theguardian.com/games/2022/sep/19/grand-theft-auto-6-leak-who-hacked-rockstar-and-what-was-stolen" ], "report_names": [ "grand-theft-auto-6-leak-who-hacked-rockstar-and-what-was-stolen" ], "threat_actors": [], "ts_created_at": 1775434734, "ts_updated_at": 1775826727, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/b1656d01276ba81b5f593fb53dfc6dd51127d649.pdf", "text": "https://archive.orkl.eu/b1656d01276ba81b5f593fb53dfc6dd51127d649.txt", "img": "https://archive.orkl.eu/b1656d01276ba81b5f593fb53dfc6dd51127d649.jpg" } }