September 2022 Leak

Overview

On September 18, 2022, approximately 90 files containing roughly 50 minutes of work-in-progress footage from Grand Theft Auto VI were posted to GTAForums by a user operating under the handle "teapotuberhacker." The footage depicted early-stage development environments, character animation tests, and gameplay sequences set in what was unmistakably Vice City. The leak is widely regarded as one of the biggest data breaches in video game history, and it forced Rockstar Games to publicly acknowledge the game's existence months before the studio had planned any official reveal.

The hacker responsible was later identified as a 17-year-old member of the Lapsus$ hacking group, based in Oxfordshire, United Kingdom. The group had previously targeted major technology companies including Nvidia, Samsung, Microsoft, and Uber. The breach was accomplished through a network intrusion into Rockstar's internal systems, allowing the hacker to access and download development files directly.

Timeline of Events

Contents of the Leak

The leaked footage consisted of early development builds running on what appeared to be a debug version of the RAGE engine. The visual quality varied significantly across clips, with some showing placeholder textures and basic lighting while others displayed more polished environments. Despite the unfinished state, the footage provided a wealth of information about the game's direction.

Confirmed Details

• Setting: The footage confirmed that the game takes place in a modern-day version of Vice City, set within the state of Leonida, a fictional version of Florida.

• Female protagonist: A playable female character, later confirmed to be Lucia Caminos, was shown in multiple clips performing robberies and driving through Vice City streets.

• Dual protagonists: An unnamed male character (later identified as Jason Duval) appeared alongside Lucia in the diner robbery sequence, confirming a two-character switching system.

• Diner robbery: The most widely circulated clip showed Lucia and the male character robbing a Waffle House-style diner, complete with NPC hostage interactions, zip-tie restraints, and a police response.

• Open world environments: Various clips showed swamps, suburban neighborhoods, beaches, neon-lit downtown streets, and highway systems, suggesting a large and varied map.

• Modern-day setting: In-game phone interfaces, social media parodies, and contemporary vehicle designs placed the game firmly in a present-day or near-future timeline.

Referenced Names

Debug menus and internal references within the leaked footage contained numerous character and location names that were not yet publicly known. These included: Billy, Chester, Dale, Danny, Donnie, Dre, DWNPLY, Kai, Iris, RB Shaw, Sam, Tit, Wyman, Vicky, YJ, Zach, Shanese, and Boobie. Several of these names, particularly Boobie, later appeared in official trailer footage, confirming that the leaked data reflected genuine development materials.

Rockstar's Official Response

On September 19, 2022, Rockstar Games released a statement on their official social media channels acknowledging the breach. The statement read in part: "We recently suffered a network intrusion in which an unauthorized third party illegally accessed and downloaded confidential information from our systems, including early development footage for the next Grand Theft Auto. We are extremely disappointed to have any details of our next game shared with you all in this way."

Rockstar further stated that the breach would not affect ongoing development and that the studio remained committed to delivering an experience that would exceed expectations. Take-Two Interactive, Rockstar's parent company, issued DMCA takedown notices against websites and social media accounts that hosted the leaked footage, though copies continued to circulate across the internet.

Impact on Development

According to reporting by Bloomberg and other outlets, the leak cost Rockstar Games approximately $5 million and consumed thousands of staff hours to address. The costs included internal security audits, legal fees, employee support programs, and efforts to contain the spread of the leaked materials. Some developers expressed frustration that years of work were presented to the public in an unfinished, unrepresentative state.

Despite the disruption, Rockstar maintained that the leak did not delay the game's development timeline. The first official trailer was released on December 4, 2023, approximately 14 months after the leak, confirming many of the details that the leaked footage had revealed.

The Hacker and Legal Proceedings

The individual behind the leak was identified as a 17-year-old from Oxfordshire, United Kingdom, who was a member of the Lapsus$ hacking group. Lapsus$ had gained notoriety throughout 2022 for a series of high-profile cyberattacks against major technology companies, including Nvidia (February 2022), Samsung (March 2022), Microsoft (March 2022), and Uber (September 2022, around the same time as the Rockstar breach).

The hacker was arrested by the City of London Police on September 22, 2022, just four days after the leak was posted. Due to the individual's age, their identity was initially protected under UK law. The case proceeded through the UK court system, and in December 2023, the hacker appeared before Southwark Crown Court. The court determined that the individual posed an ongoing risk and issued an indefinite hospital order, resulting in detention in a secure hospital facility rather than a conventional prison sentence.

Community Reaction

The leak generated an enormous response across the gaming community. Within hours of the initial post, the footage had been viewed millions of times. Reactions were split: some fans were thrilled to see confirmation of a Vice City setting and a female protagonist, while others criticized those who viewed or shared the leaked materials, arguing that it disrespected the work of thousands of developers.

Many game developers outside of Rockstar posted their own early development footage on social media in solidarity, using the hashtag #InSolidarity to demonstrate that all games look rough during early development. This movement highlighted the difference between polished marketing materials and the reality of day-to-day game development.

Key Facts

Trivia

• The leak was initially met with skepticism by many fans, who believed the footage was too rough to be from a major Rockstar production. Rockstar's confirmation the following day surprised those who had dismissed the leak as fake.

• The Waffle House-style diner robbery sequence became the single most viewed and discussed clip from the leak, as it showed both protagonists working together in a scripted heist scenario.

• Several of the character names found in the leaked debug data, including "Boobie" and "Dre," were later confirmed to correspond to Boobie Ike and Dre'Quan Priest, both of whom appear in the official trailers.

• The #InSolidarity movement that followed the leak saw developers from studios including Naughty Dog, Santa Monica Studio, Insomniac Games, and many others share unfinished footage of their own projects.

• The leak occurred just hours after the same hacker group had targeted Uber's internal systems, suggesting a coordinated spree of attacks over the same weekend.