September 2022 Leak
A comprehensive account of the September 2022 Grand Theft Auto VI leak, in which a teenage hacker from the Lapsus$ group posted approximately 90 files of work-in-progress footage to GTAForums. The leak confirmed Vice City as the setting, a female protagonist, and dual playable characters, and is widely considered one of the largest data breaches in video game history.
On This Page
Overview
On September 18, 2022, approximately 90 files containing roughly 50 minutes of work-in-progress footage from Grand Theft Auto VI were posted to an online forum by a user operating under the handle "teapotuberhacker." The footage depicted early-stage development environments, character animation tests, and gameplay sequences set in what was unmistakably Vice City. The leak is widely regarded as one of the biggest data breaches in video game history, and it forced Rockstar Games to publicly acknowledge the game's existence months before the studio had planned any official reveal.
The hacker responsible was later identified as a 17-year-old member of the Lapsus$ hacking group, based in Oxfordshire, United Kingdom. The group had previously targeted major technology companies including Nvidia, Samsung, Microsoft, and Uber. The breach was accomplished through a network intrusion into Rockstar's internal systems, allowing the hacker to access and download development files directly.
Timeline of Events
Date | Event |
|---|---|
September 18, 2022 | Approximately 90 files of GTA VI work-in-progress footage are posted to an online forum by "teapotuberhacker." The files include gameplay clips, debug menus, and source code snippets. |
September 18, 2022 | The footage spreads rapidly across social media, YouTube, and community discussion. Millions of people view the clips within hours. |
September 19, 2022 | Rockstar Games issues an official statement confirming the leak is genuine, describing it as a "network intrusion" and expressing disappointment that details were shared prematurely. |
September 22, 2022 | The hacker is arrested by the City of London Police's cybercrime unit in Oxfordshire, United Kingdom. |
December 2023 | At Southwark Crown Court, the hacker receives an indefinite hospital order, meaning they are detained in a secure hospital facility rather than a conventional prison. |
Contents of the Leak
The leaked footage consisted of early development builds running on what appeared to be a debug version of the RAGE engine. The visual quality varied significantly across clips, with some showing placeholder textures and basic lighting while others displayed more polished environments. Despite the unfinished state, the footage provided a wealth of information about the game's direction.
Confirmed Details
Setting: The footage confirmed that the game takes place in a modern-day version of Vice Cityset within the state of Leonidaa fictional version of Florida.
Female protagonist: A playable female character, later confirmed to be Lucia Caminoswas shown in multiple clips performing robberies and driving through Vice City streets.
Dual protagonists: An unnamed male character (later identified as Jason Duval) appeared alongside Lucia in the diner robbery sequence, confirming a two-character switching system.
Diner robbery: The most widely circulated clip showed Lucia and the male character robbing a Waffle House-style diner, complete with NPC hostage interactions, zip-tie restraints, and a police response.
Open world environments: Various clips showed swamps, suburban neighborhoods, beaches, neon-lit downtown streets, and highway systems, suggesting a large and varied map.
Modern-day setting: In-game phone interfaces, social media parodies, and contemporary vehicle designs placed the game firmly in a present-day or near-future timeline.
Referenced Names
Debug menus and internal references within the leaked footage contained numerous character and location names that were not yet publicly known. These included: Billy, Chester, Dale, Danny, Donnie, Dre, DWNPLY, Kai, Iris, RB Shaw, Sam, Tit, Wyman, Vicky, YJ, Zach, Shanese, and Boobie. Several of these names, particularly Boobielater appeared in official trailer footage, confirming that the leaked data reflected genuine development materials.
Rockstar's Official Response
On September 19, 2022, Rockstar Games released a statement on their official social media channels acknowledging the breach. The statement read in part: "We recently suffered a network intrusion in which an unauthorized third party illegally accessed and downloaded confidential information from our systems, including early development footage for the next Grand Theft Auto. We are extremely disappointed to have any details of our next game shared with you all in this way."
Rockstar further stated that the breach would not affect ongoing development and that the studio remained committed to delivering an experience that would exceed expectations. Take-Two Interactive, Rockstar's parent company, issued DMCA takedown notices against websites and social media accounts that hosted the leaked footage, though copies continued to circulate across the internet.
Impact on Development
The leak reportedly cost Rockstar Games approximately $5 million and consumed thousands of staff hours to address. The costs included internal security audits, legal fees, employee support programs, and efforts to contain the spread of the leaked materials. Some developers expressed frustration that years of work were presented to the public in an unfinished, unrepresentative state.
Despite the disruption, Rockstar maintained that the leak did not delay the game's development timeline. The first official trailer was scheduled for December 5, 2023 but leaked on December 4, prompting Rockstar to release it on YouTube the same day, approximately 14 months after the September 2022 leak. The trailer confirmed many of the details that the leaked footage had revealed.
The Hacker and Legal Proceedings
The individual behind the leak was identified as a 17-year-old from Oxfordshire, United Kingdom, who was a member of the Lapsus$ hacking group. Lapsus$ had gained notoriety throughout 2022 for a series of high-profile cyberattacks against major technology companies, including Nvidia (February 2022), Samsung (March 2022), Microsoft (March 2022), and Uber (September 2022, around the same time as the Rockstar breach).
The hacker was arrested by the City of London Police on September 22, 2022, just four days after the leak was posted. Due to the individual's age, their identity was initially protected under UK law. The case proceeded through the UK court system, and in December 2023, the hacker appeared before Southwark Crown Court. The court determined that the individual posed an ongoing risk and issued an indefinite hospital order, resulting in detention in a secure hospital facility rather than a conventional prison sentence.
Community Reaction
The leak generated an enormous response across the gaming community. Within hours of the initial post, the footage had been viewed millions of times. Reactions were split: some fans were thrilled to see confirmation of a Vice City setting and a female protagonist, while others criticized those who viewed or shared the leaked materials, arguing that it disrespected the work of thousands of developers.
Many game developers outside of Rockstar posted their own early development footage on social media in solidarity, using the hashtag #InSolidarity to demonstrate that all games look rough during early development. This movement highlighted the difference between polished marketing materials and the reality of day-to-day game development.
Key Facts
Detail | Information |
|---|---|
Date of leak | September 18, 2022 |
Platform | an online forum |
Handle | teapotuberhacker |
Files leaked | Approximately 90 files (~50 minutes of footage) |
Hacker group | Lapsus$ |
Hacker's age | 17 years old at time of breach |
Location | Oxfordshire, United Kingdom |
Estimated cost to Rockstar | Approximately $5 million |
Arrest date | September 22, 2022 |
Sentencing | Indefinite hospital order (December 2023) |
Trivia
The leak was initially met with skepticism by many fans, who believed the footage was too rough to be from a major Rockstar production. Rockstar's confirmation the following day surprised those who had dismissed the leak as fake.
The Waffle House-style diner robbery sequence became the single most viewed and discussed clip from the leak, as it showed both protagonists working together in a scripted heist scenario.
Several of the character names found in the leaked debug data, including "Boobie" and "Dre," were later confirmed to correspond to Boobie Ike and Dre'Quan Priestboth of whom appear in the official trailers.
The #InSolidarity movement that followed the leak saw developers from studios including Naughty Dog, Santa Monica Studio, Insomniac Games, and many others share unfinished footage of their own projects.
The leak occurred just hours after the same hacker group had targeted Uber's internal systems, suggesting a coordinated spree of attacks over the same weekend.