The Man Who Leaked GTA 6 Is Free
Arion Kurtaj — the hacker who British authorities identified as a key member of the Lapsus$ cybercriminal group and a central figure in both the September 2022 Rockstar Games data breach and the subsequent GTA 6 development footage leak — is no longer being held in a secure psychiatric hospital. The update was confirmed by BBC News cyber correspondent Joe Tidy, who reported the change in Kurtaj's detention status. Kurtaj had been held indefinitely in secure psychiatric care following his 2023 trial, during which a jury found him responsible for the Rockstar hack despite him being found unfit to stand trial due to autism.
What Kurtaj Did — The Full Story
In September 2022, while under police bail conditions for a separate cybercrime matter and supposedly living in a hotel under police supervision, Arion Kurtaj used a Amazon Fire Stick, a hotel television, and a smartphone to hack into Rockstar Games' internal Slack servers. He then downloaded and published over 90 clips of early GTA 6 development footage — the largest single leak in Rockstar's history — and threatened to release GTA 6's source code unless Rockstar paid a ransom. Rockstar confirmed the breach was genuine but declined to pay. Kurtaj was already awaiting trial for previous Lapsus$ attacks on Uber, Nvidia, and Microsoft at the time of the Rockstar hack. The sheer audacity of continuing his hacking activity from a hotel room while under active police supervision became one of the most widely reported cybercrime stories of 2022.
What Happened at Trial
Kurtaj was found unfit to stand trial due to his autism diagnosis. In a jury process without him present, he was found to have committed the acts charged. He was subsequently given an indefinite hospital order — meaning he was detained in secure psychiatric care for an indefinite period rather than sentenced to a fixed prison term. This indefinite detention can end when medical professionals certify that the detainee no longer presents a risk. That certification appears to have now been granted, resulting in Kurtaj's release from secure hospital care.
What His Release Means in Practice
Kurtaj's release from secure psychiatric care does not mean he is free of all conditions. He will almost certainly be subject to ongoing supervision, reporting requirements, and potentially restrictions on internet access or device usage as conditions of his continued liberty. Separately, the remaining members of the Lapsus$ group face their own ongoing legal proceedings in multiple jurisdictions. The cybersecurity community has noted the timing of the news — coming just months before GTA 6's November 19 launch — though there is no credible suggestion that Kurtaj's release poses any direct threat to Rockstar's systems.
What This Means for Indian GTA Fans
For Indian fans who followed the 2022 leak closely — and the leaked footage spread rapidly across Indian gaming communities on Telegram and YouTube within hours of the breach — this story closes a chapter in the most dramatic behind-the-scenes saga of GTA 6's development. The hacker who gave the world its first unplanned look at GTA 6's development state is no longer in secure detention. GTA 6 itself, meanwhile, is four months from launch and in better shape than ever. The leak that was meant to damage Rockstar ultimately generated billions in additional pre-launch attention. The irony is not lost on anyone.
My Take
The Arion Kurtaj story is one of the most remarkable in gaming history — a teenager who hacked one of the most secretive studios in the world from a hotel room using consumer electronics while under active police supervision. Whatever one thinks of the legal outcome, the 2022 leak fundamentally changed how GTA 6's development journey was experienced by fans. The footage that was stolen gave the community a glimpse of something real during a period of near-total information blackout. Four months before launch, that chapter is closed. November 19 is the only thing that matters now.
