There are two numbers attached to Rockstar Games and leaked footage, and they are separated by nearly three orders of magnitude.
The first is $5 million. That is what the September 2022 breach cost the company, a figure Rockstar itself put on the record. The second is $2.83 billion, which is how much value came off Take-Two Interactive’s market capitalization in the days after clips from a live GTA 6 build started appearing under the name CyberLeek.
Only one of those numbers represents money that left the building. Understanding which is which explains most of the confusion in the coverage this month, including why Take-Two’s chief executive can truthfully say the leaks had no financial impact while the company’s valuation was visibly falling.
The short version
- 2022 breach: 90 clips of early development footage plus source code, leaked to a fan forum. Rockstar put the cleanup cost at $5 million.
- The human cost of that one: staff were pushed back into offices, and the hacker responsible is now awaiting a retrial scheduled for November 2026
- 2026 leaks: CyberLeek has been posting from what appears to be a playable build, not leftover test footage
- Market reaction: Take-Two went from $248.13 on August 18 to $232.84, a drop of $15.29 a share and roughly $2.83 billion in valuation, about 6% of the company
- The recovery: shares have already clawed back part of it, closing around $240.15
- The company line: CEO Strauss Zelnick called the leaks “really frustrating and upsetting” while insisting there has been no financial impact
- What is actually happening now: Take-Two filed subpoenas on August 20 in the Southern District of New York, compelling Microsoft and Discord to hand over data tied to the CyberLeek persona
What the 2022 leak actually cost
The September 2022 incident remains the more instructive of the two, because it has been through a courtroom and therefore has documented numbers rather than estimates.
Arion Kurtaj, working with the group Lapsus$, obtained and published 90 clips of GTA 6 in early development along with source code. Rockstar told the court the attack cost the company $5 million, and that figure covers concrete things: incident response, forensic investigation, data recovery, and the enormous copyright and takedown operation that followed as the clips spread faster than anyone could file DMCA notices.
The knock on effects were harder to price. Rockstar pushed staff back into offices as a security measure, which carried real operational cost and, by most accounts, real friction with a workforce that had settled into remote arrangements. Kurtaj received an indefinite hospital order in 2023 after the court found he intended to return to cybercrime immediately. He has since been moved from a secure hospital to prison, with a retrial listed for November 2026, the same month GTA 6 is due to ship.
The important part: Take-Two’s stock dipped in 2022 and then recovered and kept climbing. Investor confidence held. The reveal that was supposed to be ruined happened anyway, far enough out from launch that nobody remembers the leak spoiling it.
The $2.83 billion number, and what it is not
Market capitalization is share price multiplied by shares outstanding. When a stock falls, that product falls, and financial media reports the difference as value “wiped out.” It is a real signal, but it is not a bill anyone pays.
No cash left Take-Two’s accounts. No project was defunded. The company’s ability to finish and ship GTA 6 is exactly what it was on August 17. What changed is the price at which strangers were willing to trade a claim on future earnings, and that price moves on sentiment as much as substance.
Six percent is a meaningful move for a company this size, and it is not nothing. But it is also roughly the sort of swing large caps produce on a soft earnings guidance day. Framing it as billions evaporating makes it sound like a catastrophe. Framing it as a 6% wobble that partially reversed within days makes it sound like what it probably is: a market pricing in a small increase in uncertainty about a November release.
Zelnick is technically correct, which is the frustrating kind of correct
The CEO’s position is that the leaks are upsetting and have no financial impact. Both halves can be true simultaneously, and the distinction is worth spelling out because it is where most arguments about this story stall.
| Cost type | 2022 leak | 2026 leaks | Real money? |
|---|---|---|---|
| Incident response | Part of the stated $5 million | Ongoing, undisclosed | Yes |
| Takedown operations | Thousands of DMCA notices | Running across X, Reddit and Discord | Yes |
| Legal pursuit | Criminal trial, retrial pending | Federal subpoenas filed August 20 | Yes |
| Operational changes | Return to office mandate | Unknown, likely internal lockdown | Yes, indirectly |
| Market capitalization | Brief dip, full recovery | $2.83 billion, partly recovered | No |
| Lost sales | No evidence of any | No evidence yet | Unproven |
A former Rockstar technical lead made the argument bluntly: the overwhelming majority of people who buy GTA 6 will never know these clips existed. That has historically been correct. Pre release leaks live inside enthusiast communities, and the person who picks the game up at a supermarket in December has not been following a Discord server.
The counterargument is that social media distribution in 2026 does not respect those boundaries the way it did in 2022. Clips do not stay in forums. They get reposted, algorithmically amplified, and stitched into reaction videos that reach people who were not looking for them.
Why this leak is structurally different
The 2022 material was early development footage, obviously unfinished, the kind of thing that gets used unfairly to claim a game looks bad two years before release. What CyberLeek has been posting appears to come from a live playable build, which is a categorically different level of access. One clip showing a character shooting the word LEEK into a wall made that distinction unmissable, because leftover test footage does not let you write custom messages with bullets.
The leaker has also wrapped the whole thing in a manifesto. A site went up under the name The CYBERLEEK Edict, framing the leaks as protest against industry monetization practices, with demands including an end to digital pre-orders, no paid single player DLC, and offline functionality for single player games. Those are positions plenty of players hold sincerely. They also sit alongside cryptocurrency promotion and a paid poll, which complicates the activist framing considerably.
The subpoenas are the real story this week
On August 20, Take-Two filed in the US District Court for the Southern District of New York to compel Microsoft and Discord to produce identifying data tied to the CyberLeek persona. The requests reportedly cover account IDs, registration and login IP addresses, phone numbers, device identifiers and OneDrive content referencing GTA, Rockstar or CyberLeek, plus identifying information for users across several named Discord servers. Both platforms have until September 4 to comply. The filings use the DMCA subpoena mechanism, which lets a rights holder demand identifying data from a platform without first filing a full lawsuit. It is fast, and it works.
That mechanism explains why the leaker’s activity has gone quiet. Unmasking is the part that turns an anonymous account into a defendant, and Kurtaj’s case is a fairly loud demonstration of where that road ends.
What actually threatens a November release
Not the clips. If anything, the marketing calendar is proceeding exactly as planned, with an extended look at the game premiering on Netflix on August 27, which is a strange and telling venue choice in itself.
The genuine risks to a game this size have always been internal. Scope, tooling, certification, the last mile of optimization across console generations. A former Rockstar developer said earlier this month that another delay would not surprise him, and that assessment had nothing to do with leaks. A breach adds security work and legal work on top of a schedule that is already the tightest it will ever be, which is a real cost even when it never appears on a balance sheet.
There is a broader pattern here too. The gaming industry keeps discovering that its most expensive problems are the ones that do not fit neatly into a financial statement, whether that is a leak, a labor dispute, or a lawsuit filed for the symbolic sum of $1.50. The number in the headline is almost never the number that matters.
The honest scorecard
Rockstar has spent real money twice now defending a game that has not shipped. Five million dollars in documented cleanup from 2022, an unknown but certainly substantial figure in 2026, plus a legal operation that is now running through federal court against platforms with their own compliance costs.
Take-Two’s shareholders had a bad three days and are already most of the way back. The $2.83 billion never existed as cash and was never going to.
And GTA 6 is still, as far as anyone outside Rockstar knows, arriving in November, which means the most consequential number in this entire story remains the one nobody has seen yet: how many copies it sells in its first week. Everything else is noise measured in dollars.
