The account behind the GTA 6 leaks spent this week doing two things that sit oddly next to each other. It kept publishing stolen gameplay under a protest slogan about physical discs. And it opened a sponsorship desk.
Then, on the morning of August 22, 2026, its distribution infrastructure went dark.
The Ad Rate Card
Before the lights went out, Cyberleek added a section to its own website offering advertising space on upcoming leaks. GamesRadar reported the terms: a $165,000 fee just for an initial, commitment-free meeting about buying that space. The site reportedly claimed that "you can advertise almost anything."
Read that again. Not $165,000 for a placement. $165,000 for the conversation about a placement.
That number does a lot of work in this story. Whatever the published manifesto and demands claimed about digital-only pre-orders and the all-digital future of the industry, an operation that charges six figures for a preliminary meeting about advertising inventory is monetising an audience. The protest framing and the rate card cannot both be the point.
Worth remembering: this is the same campaign that has been distributed with crypto links, QR codes and an associated memecoin since day one, and the same campaign the Stop Killing Games campaign publicly rejected on August 20, urging people not to give it money. We covered that rejection in Stop Killing Games distances itself from the leaker.
Treat every payment request connected to this campaign as a scam, regardless of the cause attached to it. That advice has not changed since August 18 and it is not softened by the fact that the footage turned out to be real.
Then the Infrastructure Vanished
On August 22, per Softonic, Notebookcheck, EGW and others, the Cyberleek website became unreachable and its Telegram channel was removed, reportedly displaying a message citing copyright infringement.
Telegram removing a channel on copyright grounds is a takedown, not a law enforcement action. It is the same mechanism that has been chasing the clips around the internet all week, just applied to the distribution hub rather than to individual uploads. Our DMCA explainer covers why platform cooperation is the whole engine of this process, and why a takedown removes a copy without touching the person holding the originals.
The timing invited the obvious conclusion. It arrived alongside reporting that Take-Two had filed subpoena requests aimed at Microsoft and Discord, and plenty of people put the two together into "they got him."
Except the Leaks Kept Coming
They did not get him. A new clip appeared after the takedown, which is how we know the operation survived the loss of its front door.
This is now the second time in four days that a pause has been read as a capture. Cyberleek went roughly twenty four hours without posting before the sixth clip, prompting exactly the same conclusion, and then posted anyway. The lesson holds: silence is not evidence of enforcement, and a removed channel is not an arrest.
No enforcement action against the leaker has been publicly confirmed by Take-Two, Rockstar or any law enforcement body. Bloomberg's reporting this week indicates Rockstar has not identified who is behind the persona or established how the material got out.
What the takedowns do accomplish is friction. Losing a website and a Telegram channel forces redistribution through smaller, less reliable, more easily infiltrated channels. It also fragments the audience, which is inconvenient for anyone who was hoping to sell them advertising.
The Pattern Underneath
Strip away the branding and this week has a shape that will be familiar to anyone who followed the 2022 breach:
- The leaker escalates to hold attention, moving from short clips to longer ones, then to cutscenes and interiors.
- The rights holder works through platforms, first with notices, then with legal process aimed at the intermediaries who hold identity records.
- The monetisation attempts get more brazen as attention peaks, because attention is the only asset that depreciates this fast.
- The publisher says nothing.
Rockstar's silence remains total. No statement about the leaks, the contents, the demands or the takedowns since the campaign began. The only visible activity from the company is enforcement and its continued paid promotion of the August 27 Extended Look.
What Happens Next
Two dates matter. August 27 is when Grand Theft Auto VI: An Extended Look premieres on Netflix at 3:00 p.m. ET and then goes free on Rockstar's YouTube channel and the official site at 9:00 p.m. ET. September 4 is the reported deadline for the subpoenaed platforms to respond.
The first of those will bury this story under an enormous amount of official footage. The second will most likely happen invisibly.
The game itself is unchanged: November 19, 2026, PS5 and Xbox Series X|S, with preload from November 12. Nothing in the leak campaign has moved a single date, and our release date tracker has the full history of the ones that did move.
Frequently Asked Questions
Was Cyberleek arrested?
There is no public confirmation of any arrest, charge or enforcement action. The website and Telegram channel going offline are platform takedowns, and new material appeared afterwards.
Should I ever pay for leaked footage?
No. Payment solicitation around leaks is a well established fraud pattern, and here it comes bundled with crypto links and a memecoin. You would be funding a criminal operation to receive something that is already circulating for free, if you receive anything at all.
Is buying an ad slot on a leak site illegal?
That is a question for a lawyer rather than a games site, but the practical answer is that no legitimate advertiser touches inventory attached to stolen copyrighted material, and a $165,000 fee to discuss it is a filter, a stunt or both.
Does any of this affect the Extended Look?
No. Rockstar has kept August 27 in place throughout, and reporting indicates it does not intend to change its marketing plans. Our viewing guide has the times and platforms.
The Bottom Line
Cyberleek tried to sell sponsorships on stolen footage at $165,000 for a first meeting, lost its website and its Telegram channel to copyright takedowns on August 22, and then posted again anyway.
The protest framing is looking thinner by the day, the enforcement is real but slow, and the only thing that actually changes the conversation arrives on August 27.