Key Highlights

• TTWO shares plummeted from approximately $248 to the low $230s, erasing around $2.8 billion in valuation before bouncing back to $240.15.
• Unauthorized GTA 6 gameplay videos, distributed by a user operating as “CyberLeek,” appear to show active gameplay from a functional version of the title.
• The publisher has issued DMCA-based subpoenas targeting Microsoft and Discord in an effort to identify the leaker.
• Malicious software has been discovered in fraudulent GTA 6 download files circulating on unauthorized platforms.
• Rockstar has confirmed an official GTA 6 showcase will stream on Netflix on August 27 at 3 p.m. ET.

Take-Two Interactive suffered a significant decline in market value this week after unauthorized Grand Theft Auto VI gameplay videos surfaced online, raising concerns that an individual has obtained access to a functional version of the highly anticipated title ahead of its November 19 release date. The stakes are unusually high for the Nasdaq-listed publisher, which also owns the 2K and Zynga labels: the franchise’s previous mainline entry, Grand Theft Auto V, has sold more than 200 million copies since its 2013 release, ranking it among the best-selling entertainment properties of any medium.

Shares of TTWO traded near $248.13 before the unauthorized material began appearing on August 18. The stock slid into the low $230 range before recovering to $240.15, leaving roughly $1.5 billion of the original $2.8 billion valuation loss still unrecovered.

The unauthorized videos have been distributed through an account operating under the username “CyberLeek” and feature numerous clips displaying previously unrevealed gameplay sequences. One particular video shows main character Jason using weapons fire to create the word “LEEK” on a surface, footage that Forbes analysts interpret as evidence of active player control rather than passive viewing of archived development material.

Additional leaked materials purportedly feature overhead perspectives of Vice City and various in-game sequences. Neither Rockstar Games nor Take-Two has issued public statements regarding the origin or the complete extent of the security compromise.

GTA 6 leaker Cyberleek has updated his website and added a new contact section
He’s now offering paid “in-video ads” and “custom-made gameplay footage” based on his GTA 6 leaks
And just to contact him and negotiate a deal, he’s reportedly asking for $164,000+ USD in crypto.… pic.twitter.com/0SgTrhIbsL
— GTA VI (@GTAVI) August 21, 2026

The breach appears to have cryptocurrency connections as well. Marketing materials associated with portions of the leaked content have been promoting a meme-based digital currency, suggesting potential financial incentives behind the unauthorized disclosure.

Legal Action Against Microsoft and Discord

On August 20, Take-Two submitted subpoena applications through the Southern District of New York. The publisher is requiring that Microsoft and Discord provide documentation associated with user accounts implicated in distributing and circulating the unauthorized footage. The DMCA mechanism allows copyright holders to obtain subscriber-identifying information from service providers without first filing a full infringement lawsuit — a faster and less costly route to unmasking alleged leakers than a conventional court case.

Microsoft has been ordered to furnish complete documentation related to the “cyberleek” identity by September 4, encompassing registration email addresses, IP addresses, telephone numbers, associated accounts, and any GTA-related materials housed in OneDrive storage.

Discord faces an identical deadline and must supply information regarding accounts connected to multiple servers, including those linked to usernames such as “CYBERLEEK,” “CINEMATICROCKSTAR,” and “Surfer24k.” The legal filing also references servers associated with prominent GTA 5 content creator Matthew “Matt” Judge, recognized online as DarkViperAU. Judge responded to the development on X, stating that he possesses no information regarding the leaks, that he remains perplexed by his mention in the subpoena documentation, and that Rockstar has not reached out to him personally.

Security Threat for the Gaming Community

A more pressing danger has surfaced for players. Counterfeit GTA 6 downloads purporting to include the leaked version are proliferating across unauthorized download platforms, and confirmed reports indicate that certain files harbor malicious software. No authenticated public distribution of any functional version exists.

Historical Perspective on Previous Breaches

The 2022 GTA 6 security incident, which resulted in approximately 90 development clips being released publicly, was linked to the Lapsus$ hacking collective and led to the 2023 sentencing of a British teenager by a UK court, yet it failed to derail the project’s progress. Take-Two maintained development schedules and has subsequently revealed a standard retail price of $79.99 for PlayStation 5 and Xbox Series X/S platforms, a level consistent with a broader industry shift toward higher premium pricing for flagship releases.

Take-Two has also scheduled an authorized presentation: a Rockstar GTA 6 showcase is planned to broadcast on Netflix at 3 p.m. ET on August 27, with subsequent availability on Rockstar’s proprietary platforms. The calendar compresses quickly from there: the Microsoft and Discord subpoena responses are due September 4, and the game itself is dated for November 19.