GTA 6 Hacker Claims the Source Code Is Still Out There

Arion Kurtaj, the teenager who pulled off one of the most significant security breaches in gaming history when he leaked roughly 90 clips of early Grand Theft Auto 6 footage in September 2022, has resurfaced from inside a UK prison using a smuggled phone, and it appears he hasn't learned his lesson at all.

Screenshots circulating on social media, first brought to wider attention by videotechuk_ on X, show Kurtaj posing from a prison door and sitting on his bed, while hinting that the source code for Grand Theft Auto 6 is still out in the wild.

According to the conversation, Kurtaj reportedly said that the GTA 6 source code is "definitely somewhere" and expressed apparent surprise that it has not leaked publicly. He then labeled the situation "Interesting" and said he would not comment further.

None of this is officially confirmed by Rockstar Games, Take-Two Interactive, or UK prison authorities, and the screenshots are unverified. However, it fits the persona of Kurtaj to generate chaos for its own sake.

For context: Kurtaj was 17 years old and a member of the Lapsus$ hacking group when he breached Rockstar's internal systems in September 2022. He then posted footage to GTAForums before Rockstar Games stepped in. At the time, Kurtaj was already on bail for hacking Nvidia and BT/EE, and his laptop had been confiscated by the police.

While under police protection at a hotel, he used an Amazon Fire TV Stick connected to the hotel room television, along with his mobile phone, to access Rockstar's internal Slack system.

He then threatened to release the source code if Rockstar did not contact him via Telegram within 24 hours. Rockstar later testified that the breach cost the company an estimated $5 million in recovery.

In December 2023, Kurtaj was sentenced to an indefinite hospital order. A judge ruled that he "remained a high risk to the public" and was "highly motivated to return to cybercrime as soon as possible." Doctors deemed him unfit to stand trial due to severe autism.

He was placed in a secure hospital, a UK facility that blends psychiatric care with custody, until professionals determine he is no longer a threat. If the leaked conversations are true, it's safe to say that the hacker remains very much a threat to Rockstar and the rest of the world.

What makes this story uncomfortable for Rockstar is not just the possibility that a convicted hacker is still posting from prison. It is the reminder that the 2022 breach ever happened at all. Since the hack, Rockstar has fired over 30 employees, faced union disputes, and reportedly implemented Area 51-level security that includes deliberate misinformation to catch leakers.

The studio has said essentially nothing about GTA 6 since confirming the November 19, 2026 release date. Strauss Zelnick confirmed marketing begins this summer. The title IDs that briefly appeared on the PlayStation Store were quickly delisted after fans exploited them. Every layer of control Rockstar has added since 2022 was a direct response to the damage Kurtaj caused.

The fact that the person at the center of that damage is now posting selfies from a prison cell and hinting about source code availability is a reminder that Rockstar's security narrative is only as strong as its weakest point. In 2022, that weakest point was a 17-year-old with a Fire TV Stick and a phone - while in police custody, no less.

Ultimately, the takeaway here is that the silence Rockstar intentionally created leaves space, and space always gets filled. Sometimes it's filled by insiders scared into silence, other times it's by AI-generated fake leaks, and in very rare instances, a convicted hacker posting from a prison cell.