What changed after the previous checkpoint
1. The site moved first, and it moved in question marks
Days before the drop, tracking accounts reported fresh activity on the Cyberleek side and a new poll on the Cyberleek site. According to TheGamer's screenshot, the question and both answers were rendered only as question marks. The poll closed on October 8 and the video appeared the same day.
Coverage split on what the poll even was. One outlet characterised it as a donation mechanism for the associated Solana token; others described it as content-neutral and blank. No source states which option won, so “the poll selected this video” stays an inference rather than a fact.
THEGAMER / THE QUESTION-MARK POLL ->2. A roughly 24-minute upload replaced the silence
On October 8, outlets reported “GTA 6: An Extended Leek” — named as a deliberate echo of Rockstar's own Extended Look — distributed as a file download from the Cyberleek site. Some outlets put the runtime at 24 minutes and most at about 25. A widely repeated “26 minutes” figure belongs to Rockstar's official video, not to this drop.
Reporting describes mission and race sequences, a clothing store with outfit customization, a mechanic visit, first-person driving in Vice City, extensive character nudity, and an apparent developer menu that spawns a vehicle from nothing. The debug tooling is the detail that matters most: it points at a development environment, which is consistent with build access and also means some on-screen behaviour may be tooling rather than shipped content.
Eurogamer reported that it had seen the video and that it appears to be legitimate, the clearest first-hand assessment published. That is an editorial judgement from viewing a file, not authentication. No outlet reports confirmation from Rockstar or Take-Two, and Take-Two did not respond to a request for comment on October 8.
3. The upload closes by asking for money, not more footage
Reporting says the video ends with a written appeal for a separate, games-related project that needs expensive hardware and months of setup. The message also concedes the obvious: readers do not know who Cyberleek is, Cyberleek could be anyone, and doubt is the correct default for an unknown.
One difference from August is worth noting. Reporting describes no in-video crypto solicitation this time, so the ask sits beside the drop rather than inside it. The incentive structure has not changed: money is being requested next to unreleased game footage.
4. The law did not move, and neither did the identity
Take-Two's reported DMCA subpoenas to Microsoft, Discord, X and Google/YouTube remain the strongest public evidence of an active identification effort. The production date requested in the Microsoft and Discord filings, September 4, passed without any public identification.
No authority has named or charged an operator. The viral courthouse footage remains unconnected to the case, and the return itself is not evidence of impunity — it is evidence that a website can be updated.
DESK / LEGAL FILE ->What is confirmed, supported and still open
Multiple outlets reported a long Cyberleek-attributed GTA 6 upload on October 8, 2026, after a month of inactivity.
Eurogamer viewed the video and judged it to appear legitimate. Content includes missions, races, shops, first-person driving and a developer menu.
Who operates the handle, whether the same person ran the August campaign, and whether a complete playable build exists.
The August exit figure stays a community estimate, reported between roughly $250,000 and $350,000 depending on what is counted.
Where the story goes next
The next fixed dates are November 12 for pre-load and November 19 for launch. In between, the thing to watch for is not another clip but a conversion of identity into public record: a court filing, a platform statement or a verified naming. Until one of those arrives, the accurate status is: handle active, operator unknown, build claim unproven.