As the GTA 6 leak crisis escalates, the net is closing in on CyberLeek, the actor behind the leaks. Independent researcher @KINGJulien15x announced that he has identified the actor responsible for the leaks and has officially submitted all collected evidence to the legal teams of Rockstar Games and its parent company Take-Two Interactive.

Identity Clues Lead to a European Bank Account

According to details shared by researcher Julien, one of the most concrete pieces of evidence in the investigations is a European-based individual bank account that is considered to be directly linked to CyberLeek.

While the possibility of the account being stolen by a third party cannot be ruled out, it is stated that various technical details and environmental factors point directly to the individual.

For the sake of confidentiality of the investigation and the proper progress of legal processes, the individual’s personal information or bank records are not being shared with the public. However, the fact that the collected document was directly delivered to the studio’s legal department indicates that the process has now moved to the legal dimension.

Critical Findings from the Investigation

The investigation revealed noteworthy points regarding the source of the leak and the profile of the perpetrator:

• History with Different Threat Actors: It is believed that CyberLeek may be a known actor who has previously engaged in cyberattacks and leaks under a different alias.
• Tips from Close Circle: It is stated that tips and information flow from close circles played a critical role in identifying the individual.
• Access Method: It is thought that the leak occurred through a direct system breach or unauthorized access from within the company. Arguments include the possibility that access to a backdoor placed in the system may have been purchased, or that there may be connections to past security incidents.
• Group Connections and Other Claims: CyberLeek has no direct connection to other known hacker groups (such as Mafia 808). Furthermore, the claims that Rockstar India’s office was hacked have not been confirmed.
• Previous Version Materials: The leaked images and tests are believed to relate to a GTA 6 build that is approximately one year old, and the materials are estimated to have been obtained around April 2026. While there is no definitive proof that a live or current game structure exists, it is speculated that previously recorded archive footage is being served up in modules.

Memecoin and Manipulation Under the Mask of “Player Rights”

The party that leaked the footage described the gameplay footage, map images, and system details shared between August 18-20 as a “protest” against digital pre-orders and in-game pricing policies.

However, the simultaneous introduction of a Solana-based memecoin project and the fact that the leak polls were conducted using this token reveals that the event is a “pump-and-dump” financial manipulation.

Researchers are warning the community against these types of attempts that exploit the good intentions of players. While it is noted that there is a possibility that donations or token purchases may be requested through story details in the coming days, Rockstar Games and Take-Two continue to rapidly remove leaked content from the internet via copyright notices (DMCA).