HeistMap — GTA VI leaks tracker, neon radar map

The September 2022 GTA VI Leak: The Biggest in Gaming History, Explained

On September 18, 2022, a user called teapotuberhacker dropped a post on GTAForums that stopped the gaming world cold: download links to more than 90 video files pulled directly from Rockstar Games' internal servers. Within hours, those clips were spreading across Reddit, Twitter, and Discord faster than any DMCA notice could travel. It was, by any measure, the single largest leak in video game history — and the only one Rockstar has ever officially confirmed as real.

This is the full, sourced account of what happened, what those clips actually showed, and what they still could not tell us about the final game.

How the Hack Happened

The breach was not the work of a sophisticated state actor or organized criminal syndicate. It was executed by Arion Kurtaj, a teenager from Oxfordshire, England, and a key member of the international cybercrime group Lapsus$. What makes the method almost comically audacious: Kurtaj carried out the Rockstar breach using an Amazon Fire TV Stick, a hotel room television, and a mobile phone — while he was on bail and under police protection following an earlier arrest.

The Rockstar hack came just days after Kurtaj had already breached Uber on September 15, 2022, by compromising the account of an external contractor whose credentials had been stolen via malware and sold on the dark web. Using that foothold, he accessed Uber's internal systems over VPN. He then pivoted to Rockstar, gaining access to the company's Slack workspace and internal dev servers, from which he exfiltrated the GTA VI footage.

Lapsus$ had previously claimed breaches at Microsoft, Cisco, Samsung, Nvidia, and Okta. The Rockstar attack was among its most headline-grabbing, if only because the stolen material — early gameplay clips — was immediately intelligible to millions of people worldwide.

On GTAForums, teapotuberhacker left a contact email and asked to "negotiate a deal" with Rockstar staff, suggesting a ransom play similar to what CD Projekt Red had experienced with its own source code leak. No deal materialized. The FBI was called in to investigate. Kurtaj was arrested shortly after, tried in the UK, found guilty of computer misuse, blackmail, and fraud, and in December 2023 was sentenced to an indefinite hospital order — meaning he remains in a secure facility for as long as medical professionals judge him a danger to the public.

Rockstar's Official Response

On September 19, 2022 — one day after the leak went public — Rockstar Games posted an official statement on its Newswire and via its social channels. The key passage, which constitutes the company's formal authentication of the leak:

"We recently suffered a network intrusion in which an unauthorized third party illegally accessed and downloaded confidential information from our systems, including early development footage for the next Grand Theft Auto."

Rockstar called it "extremely disappointing" and stated the game "was never intended to be shown in such a primitive state." On the question of development continuity, the statement was direct: "At this time, we do not anticipate any disruption to our live game services nor any long-term effect on the development of our ongoing projects. Our work on the next Grand Theft Auto game will continue as planned."

Take-Two Interactive, Rockstar's parent company, simultaneously began issuing mass DMCA takedown notices against YouTube uploads and other mirrors of the footage. The speed and scale of those takedowns — before Rockstar's statement was even published — served as a secondary confirmation of authenticity for many observers.

What the 90 Clips Actually Showed

The footage amounted to roughly 90 minutes of raw, unpolished development material — build tests, animation experiments, level geometry passes, and in-progress gameplay sequences. Visually rough by design: this is how games look years before launch, not a representative sample of the shipping product. That caveat matters. With it in mind, here is what was verifiably present in the clips:

  • Vice City setting: The modern-day Miami-inspired city was clearly identifiable in multiple clips — waterways, neon signage, recognizable Florida-style architecture. This confirmed the long-rumored return to a Vice City-type locale.
  • Two protagonists — Lucia and Jason: Multiple clips showed two distinct player characters. One, a young Latina woman later officially named Lucia, was shown in several sequences. A male character, Jason, appeared alongside her. The diner robbery clip — where the pair hold up a Waffle House-style restaurant — became the most widely shared piece of footage and was later echoed in the official Trailer 1.
  • Voice acting already recorded: Several clips included full voice-over dialogue, indicating the game was further along in production than the rough visuals suggested.
  • Multiple gameplay systems visible: Driving, shooting, NPC interactions, stealth approaches, and dialogue trees were all represented across the 90 files. A strip club scene was also present.
  • Animation and physics tests: Many clips were clearly not "playable" sequences but internal test footage — ragdoll tests, traversal mechanics, crowd behavior.

When Rockstar released its official first trailer in December 2023, the community immediately cross-referenced it against the leaked clips. The Vice City skyline, Lucia's character design, the diner robbery scenario, and specific environmental details all matched — confirming the September 2022 leak as a genuine window into the game's development, not fabricated footage.

What the Leak Did NOT Tell Us

This is where the record requires precision. The clips showed a game in mid-development; they could not and did not confirm finished features, release-ready mechanics, or final design decisions. Significant community speculation emerged from the footage that remains unconfirmed to this day:

  • GTA Online successor structure: Fans widely assumed a "GTA Online 2" would launch alongside the game. The clips contained nothing that officially confirms the structure, timing, or scope of any multiplayer component. This remains community expectation, not confirmed fact.
  • PC release timing: Nothing in the leaked footage addressed a PC version. Rockstar has since confirmed a console-first release, with PC unaddressed publicly — this was not answerable from the leak.
  • Map size and scope: Individual environment clips circulated as "proof" of a massive map, but the footage was not a systemic map survey. Specific size claims circulating on Reddit and YouTube channels after the leak were speculation, not direct evidence.
  • Source code: Rockstar clarified that while gameplay footage was stolen, GTA VI source code was not confirmed compromised in the September 2022 incident — though separate reports later emerged about source code for older GTA titles being part of other incidents.
  • Release date: Nothing in the clips spoke to a release window. Any date estimates circulating at the time were derived from production progress estimates by third parties, not from the footage itself.

Why This Leak Matters — and Why It Was Unprecedented

Leaks in gaming are not uncommon. Conceptual art, achievement lists, retailer database entries — these surface regularly. What made the September 2022 event categorically different was the confirmed authenticity, the scale, and the format. Nearly 90 raw development videos from a major unreleased title, authenticated by the studio itself, made available for public consumption roughly two-plus years before the game's expected release window.

It forced Rockstar's hand. According to reporting at the time, the studio's original marketing roadmap had no plans to formally acknowledge GTA VI until much later. The leak effectively collapsed that strategy. The official Trailer 1, released December 4, 2023, arrived earlier than originally planned — in part as a response to controlling the narrative after the September 2022 breach.

For players, it was an unprecedented raw look at AAA game development. For Rockstar, it was a reputational and operational crisis. For the industry, it was a wake-up call about internal security — specifically, how social engineering and credential theft can bypass technical defenses entirely.

The footage is frozen in time: a snapshot of GTA VI as it existed in 2022, not as it will ship. Judge it accordingly.

HeistMap is an unofficial fan resource and is not affiliated with Rockstar Games or Take-Two Interactive. All trademarks belong to their respective owners.

Sources

Back to blog