The 2022 GTA 6 Leak: What Happened and How the Case Ended

A game nobody had announced yet

In September 2022, Rockstar had not shown the public a single frame of its next Grand Theft Auto. Neither Rockstar nor Take-Two had formally announced it, as Game Developer pointed out at the time. Then unfinished material from an unannounced game began spreading online.

This page is a plain timeline of what is documented: what the company said, what a jury found and what a court decided. It is not a list of what leaked, and it will not describe it. If you want to know how to treat unverified claims in general, start with the leaks guide.

What Rockstar said

On September 19, 2022, Rockstar confirmed a network intrusion. In the words Game Developer reported, an unauthorized third party accessed and downloaded confidential information, including early development footage for the next game (Game Developer). Reported The statement itself was posted by Rockstar; we read it as reported by Game Developer, so it is labeled press-reported.

Rockstar also said it did not anticipate any disruption to its live game services, and did not expect a long-term effect on the development of its ongoing projects, and that work would continue as planned (Game Developer). Reported

That last point is a company prediction, not a measured result. We have no independent way to check how much work the incident cost the studio, and we will not guess.

Who was behind it

The person tied to the Rockstar intrusion in court was Arion Kurtaj, who The Record describes as a key member of the Lapsus$ group. It reports that Uber and Revolut were also hacked (The Record). Reported At the trial, prosecutors named Nvidia, Uber and Rockstar as victims, per BankInfoSecurity (BankInfoSecurity).

We stick to what the court record and the reporters covering it say. We say nothing about the defendant’s life, motives or character beyond that.

The August 2023 verdict

A jury at Southwark Crown Court in London reached its verdict in August 2023. Because psychiatrists had assessed the main defendant as unfit to stand trial, the jury was not asked whether he had criminal intent. The judge told them to decide only whether he committed the acts (BankInfoSecurity). Reported

They found that he did, on all 12 offenses charged: six counts of unauthorized computer access, three of blackmail, two of fraud and one of failing to comply with a section 49 notice, which is an order to hand over a password or code (BankInfoSecurity). Reported The Press Association’s report, carried by LBC, gives the same breakdown and adds that the trial lasted two months, followed by nine hours and 19 minutes of jury deliberations (LBC).

A second defendant, aged 17, was tried alongside him. He cannot be named. The Record reports that he received an 18-month Youth Rehabilitation Order, which restricts his internet use (The Record). Reported

The December 2023 sentence

Reports dated December 22, 2023 say Kurtaj was given an indefinite hospital order. The Record explains what that means: he stays in secure hospital care for life or until doctors judge that he is no longer a danger to society (The Record). Reported

This is not the same as a prison sentence with a fixed end date. It is also a medical decision as much as a legal one, so we cannot tell you how long it will last. Nobody can, and any article that does is guessing.

How to read the court terms

Court reports use words that sound similar to everyday language but mean something specific. These are the ones in this story, as the cited reports use them.

• Unfit to stand trial. Psychiatrists assessed the main defendant as unable to take part in a normal trial. The case then went ahead as a hearing on the facts: the jury decided whether he did it, not why (BankInfoSecurity). Reported
• Hospital order. A court order to be held in secure hospital care rather than prison. The Record says that lasts until doctors decide he is no longer a danger (The Record). Reported
• Youth Rehabilitation Order. A community sentence available for under-18s, here 18 months and with limits on internet use (The Record). Reported

None of these terms says anything about the game. They only describe how the UK legal process treated the people involved.

What came next for the game

The timeline after the intrusion is public, and we can lay it side by side with the intrusion without claiming one caused the other.

• September 19, 2022: Rockstar confirms the intrusion.
• December 4, 2023: Take-Two issues the press release announcing the game, “Coming 2025” (Take-Two). Official The story of that release, and the trailer that went public a day early, is in The GTA 6 trailer that leaked and still broke YouTube.
• May 2025 and November 2025: Rockstar moves the date twice (Rockstar, Rockstar). Official
• Now: The game is set for November 19, 2026. See the release date guide.

It is tempting to draw a line from 2022 to the delays. We did not find a statement from Rockstar or Take-Two that does, so we do not. If you read such a claim somewhere else, ask for the source.

What the case did not settle

A court verdict tells you who was responsible for the intrusion. It does not tell you whether anything you saw online afterward was accurate. Leaked material from an unfinished build can be outdated by the time a game ships, and Rockstar has never confirmed any of it. Anything not confirmed by Rockstar or Take-Two is a rumor under our rules, whatever its origin. Rumor / unconfirmed

That is also why we do not publish or describe it: it belongs to the publisher, it was obtained illegally, and it can spoil the game for people who never asked to see it.

Why we keep this story short on details

Plenty of pages treat this episode as a treasure hunt. We do not. We leave out the contents of the leaked material, any claims about it, and anything about the people involved that a court or a reliable outlet did not report. Our rule is simple: if Rockstar or Take-Two has not said it, it is a rumor, and if it came out through a crime, we still do not repeat it.

A separate set of unauthorized material circulated in August 2026. The leaks guide covers that and explains why it is unconfirmed.

Quick facts

1. Rockstar confirmation: September 19, 2022, an unauthorized third party took confidential information including early development footage. (Game Developer) Reported
2. Rockstar’s outlook then: no expected disruption to live services or long-term effect on ongoing projects. (Game Developer) Reported
3. Verdict: August 2023, a London jury found all 12 charged offenses were committed, in a procedure that did not decide intent. (BankInfoSecurity) Reported
4. Sentence: indefinite hospital order, reported December 22, 2023. (The Record) Reported
5. Co-defendant: a 17-year-old who cannot be named received an 18-month Youth Rehabilitation Order. (The Record) Reported
6. Official announcement: Take-Two’s press release is dated December 4, 2023. (Take-Two) Official