Major Game Leaks: Rhysida, Cyberleek and High-Profile Breaches at Insomniac, Naughty Dog and Rockstar

Sometimes an early release means theft. Over the past decade, several major video-game studios have suffered large-scale data breaches that exposed unreleased builds, story assets and internal documents long before official launch dates.

In December 2023 the ransomware group Rhysida breached Insomniac Games through a single remote employee who clicked a phishing link. The attackers stole a very early dev-build of Marvel’s Wolverine, a large set of assets from the then-upcoming Marvel’s Spider-Man 2, employee passport scans and internal communications. After failing to receive a 50-Bitcoin ransom, Rhysida published the material. Brazilian pirates later turned the Spider-Man 2 assets into a fully playable PC build that circulated months before Sony’s official 2025 PC release.

A similar external breach hit Naughty Dog when attackers exploited an old vulnerability in the studio’s AWS infrastructure, originally introduced in patches for Uncharted 3 or the first The Last of Us. The stolen files included fully rendered cutscenes from The Last of Us Part II that revealed major plot points months before release. Sony traced the activity to a 20-year-old individual in the Netherlands; the final legal outcome remains undisclosed.

Rockstar Games has endured repeated leaks. In 2013 an Amazon logistics error allowed physical copies of GTA V to reach stores early, resulting in a complete Xbox 360 build appearing online four days before launch. The most damaging incident occurred in September 2022 when British teenager Arian Kurtaj used social-engineering techniques against Rockstar’s Slack workspace to obtain dozens of early GTA VI alpha videos. Kurtaj was later placed in a secure psychiatric facility after also breaching Uber.

The most recent case involves the still-unidentified actor known as Cyberleek, who in August 2024 released approximately 25 minutes of near-final GTA VI gameplay footage while simultaneously promoting a memecoin. The perpetrator combined extortion threats, spoiler auctions and paid watermark advertising before disappearing after Rockstar’s official reveal on Netflix. Rockstar continues to pursue legal action and platform takedowns.

These incidents illustrate recurring attack vectors—phishing, misconfigured cloud storage, supply-chain errors and social engineering—that remain relevant to any studio handling high-value pre-release content.