First known burst
Apparent GTA VI gameplay attributed to Cyberleek begins circulating online. The first clips are ordinary enough to trigger authenticity debate rather than a trailer reaction.
More footage, more reposts
Additional clips and map images spread. Copyright removals begin to shape the story, with viewers treating disappearance as a clue.
The “LEEK” moment
Reports describe a clip in which the player shoots the word LEEK into a wall. The signature becomes the campaign's visual stamp.
Take-Two files subpoena petitions
Reporting says petitions are filed in the Southern District of New York seeking identifying data from Microsoft and Discord.
Identity hunt becomes the headline
Requests reportedly include account and device records. Online theories multiply faster than verified evidence.
Still no verified name
The public record contains a takedown trail and legal filings, but no independently confirmed operator.
Discord says the subpoena is not yet served
PC Gamer reports Discord had not received Take-Two's subpoena and would evaluate its validity and scope before responding. The request may be approved, but production and identification are still future steps.
Take-Two expands requests to X and Google
TorrentFreak reports additional DMCA applications naming X accounts and YouTube channels. The report says no user data had changed hands and some named accounts may be impostors.
The leaks move into Lucia's story
PC Gamer reports a 4-minute-38-second clip centered on Lucia's prologue. It is the campaign's most explicit story spoiler and the last release identified in later coverage.
The token creator cashes out fees
CoinDesk reports that the creator claimed roughly $146,000 in wrapped SOL and sold accumulated creator-fee tokens for about $125,000 in SOL. Later estimates place the combined exit above $250,000.
Rockstar's Extended Look goes live
Rockstar publishes a new official video, described as captured entirely from in-game footage on PlayStation 5. It becomes a clean comparison point for leak claims, not a confirmation of Cyberleek's source or identity.
No verified new leak, identity or arrest
Reporting reviewed for this update identifies no release after August 26. Viral courthouse footage remains unverified, and no public authority has named or arrested a Cyberleek operator.
The production checkpoint passes without a public name
The date requested in the Microsoft and Discord subpoenas comes and goes with no filing, platform statement or official announcement reviewed by this desk naming the operator. Silence is not exoneration and it is not proof of an arrest.
A poll of question marks signals activity
Tracking accounts report fresh movement on the Cyberleek side and a new site poll whose only visible option was a row of question marks. Coverage stresses that nothing proved the original operator was behind it, and that someone with access to the accounts or tooling could not be ruled out.
“GTA6: An Extended Leek” returns the name to the feed
Outlets report a long upload attributed to Cyberleek, titled as a deliberate echo of Rockstar's Extended Look and put at roughly 24 to 25 minutes. Reporting describes story cutscenes, a first-person driving view and character nudity, and several outlets lead with spoiler warnings rather than analysis.
The closing message asks for funding, not just attention
Reporting says the upload ends with a written pitch for a separate, hardware-heavy project funded by contributions, and an admission that readers cannot know who is behind the handle. The identity question stays open, and no authority has named or charged an operator.
Next checkpoint
The near-term checkpoints are now the November 12 pre-load and the November 19 launch. Between them, watch for anything that converts an identity into a public record: a court filing, a platform statement or a verified naming. Until that exists, the accurate status stays: handle active, operator unknown.