Official Grand Theft Auto VI artwork used as a spoiler-safe editorial reference
Editorial image: official Rockstar Games key art. This page does not host or mirror leaked footage.

The short version

Reporting on October 8, 2026 describes a long upload titled “GTA 6: An Extended Leek” — a deliberate echo of Rockstar's own “An Extended Look” — attributed to the Cyberleek handle. Outlets put the runtime at roughly 24 to 25 minutes and describe it as distributed as a file download of about 367 to 370 MB from the Cyberleek site rather than a streaming post.

It is the first claimed Cyberleek release since the August 26 Lucia prologue clip and the creator-fee withdrawal that followed. It is not a verified identity, not an arrest and not a confirmed complete build.

Desk rulingAn upload is not an attribution. The material can be genuine, the account can be the original, and the operator can still be unknown. Those are three separate findings.

What was reported to be in the video

This desk does not embed, restage or frame-by-frame recap leaked footage. The categories matter more than the content, because they define both the spoiler risk and the access question:

Two discrepancies are worth keeping visible. Outlets disagree on the runtime — several say 24 minutes, most say about 25 — and one widely repeated “26 minutes” figure actually belongs to Rockstar's official Extended Look, not to this upload. The exact runtime is a reporting detail, and mirrors can be trimmed or re-uploaded.

Why the developer menu is the most useful detail

A debug menu changes what the footage can be used to argue. Spawning assets from nothing points to a development or test environment rather than a retail copy, which is consistent with access to a build — and also means some of what appears on screen may be tooling behaviour rather than shipped content. Outlets noted the same caution about the nudity, since non-player characters reportedly do not react to it the way final-game systems would.

So the honest read is narrower than the headlines: the release is new, the access question is better informed, and the assertion of a complete playable build remains open. The video authenticity brief explains which tells are strong and which are decorative.

Who actually checked it

Eurogamer reported that it had seen the video and that it appears to be legitimate — the clearest first-hand assessment published. Several other outlets describe the footage in specific enough detail to indicate direct viewing. That is meaningful, and it is still not authentication: no outlet reports confirmation from Rockstar or Take-Two, and Take-Two did not respond to a request for comment on October 8.

Evidence boundary“Appears to be legitimate” is an editorial judgement from viewing the file. It is not a chain of custody, a capture date, or a statement about who operates the handle.

The ending is a funding appeal, not a leak

Reporting says the upload closes with a written message rather than more footage. In it, the author describes a separate project unrelated to Rockstar but related to games, says it needs expensive hardware and months of setup, and states that whatever is collected goes to that project.

The message also concedes the obvious: it tells readers they do not know who Cyberleek is, that Cyberleek could be anyone, and that doubt is the correct default for an unknown. Notably, this drop reportedly contains no in-video crypto solicitation, unlike the August releases — the ask sits next to the drop rather than inside it.

Read the incentive, not the rhetoricA request for money attached to unreleased game footage is an extraction pattern whether or not the footage is real. Never connect a wallet, share a seed phrase or install a “player” to watch a leak.

For the money history, use the cash-out file. For the practical protections, use the anti-scam guide.

What preceded the upload

Days earlier, tracking accounts reported fresh activity on the Cyberleek side and a new site poll in which, per TheGamer's screenshot, the question and both answers were rendered only as question marks. The poll closed on October 8 and the video appeared the same day. Outlets treat the sequence as a teaser that resolved into a drop; no source states which option won, so “the poll selected this video” stays an inference.

Coverage of the poll was divided on what it even was. One outlet characterised it as a donation mechanism for the associated Solana token, while others described it as content-neutral and blank. Both can be true at once, and no source reconciles them. The more cautious reading — that either the original operator returned or someone gained control of the site — still applies after the video.

What the drop does not establish

CONFIRMED

A long GTA 6 upload attributed to Cyberleek was reported by multiple outlets on October 8, 2026, distributed as a file download.

SUPPORTED BY REPORTING

Eurogamer viewed it and judged it to appear legitimate. Content includes missions, races, shops, first-person driving and nudity.

STILL OPEN

Whether the same operator ran the August campaign, and whether a complete playable build exists rather than test tooling.

UNVERIFIED

Identity, location and any law-enforcement action. No authority has named or charged a Cyberleek operator.

Do not download a “build” to watch it

This wave produced two different file types, and conflating them is how people get infected. The reported drop is a video of roughly a third of a gigabyte. Malware campaigns riding the same search are pushing files named like a Cyberleek build and sized in the tens or hundreds of gigabytes, with installer payloads and almost no real data inside. A leak that needs an installer, a codec, an extension or a security setting disabled is not a leak.

If you want the verified baseline, use Rockstar's official Extended Look page. If you want the chronology, use the timeline. If you want the current status in one place, use the latest status ledger, then the GTA 6 leaks index for the whole file.

Official release information still belongs on Rockstar's GTA VI page. No delay has been announced, and the listed date remains November 19, 2026.