On 19 September 2022, three days after an unknown actor uploaded ninety video clips of pre-alpha Grand Theft Auto VI footage to the GTAForums message board, Rockstar Games published a short statement on its corporate Twitter/X account and on rockstargames.com (Rockstar Games, 2022). The statement ran to roughly one hundred and fifty words across three paragraphs. It confirmed that a 'network intrusion' had occurred, conceded that 'an unauthorized third party illegally accessed and downloaded confidential information from our systems, including early development footage for the next Grand Theft Auto', and closed with a sentence promising to 'properly introduce' the next game 'when it is ready' (Rockstar Games, 2022).
For an industry in which post-leak communications routinely consist of either total silence, copyright-takedown form letters, or vague references to 'unauthorised material' that decline to confirm authenticity, the Rockstar statement was unusual on several measurable axes. It confirmed authenticity in plain language. It contained no legal threats, no references to ongoing investigations beyond the bare minimum, and no requests that the public refrain from viewing or sharing the material. Its emotional vocabulary — 'sad', 'disappointed', 'hard working team' — was directed inward, at staff, rather than outward, at perpetrators or pirates. And it contained what is in retrospect the closest thing to a public roadmap commitment Rockstar would make between 2018 (Sam Houser's brief allusion to the next GTA in Edge magazine) and the December 2023 Trailer 1 release: the promise that 'we will properly introduce you to the next game when it is ready' (Rockstar Games, 2022; Take-Two Interactive, 2022).
This report performs a close textual reading of the statement, situates it against three comparable post-leak communications from CD Projekt Red (February 2021), Bungie (November 2022), and Insomniac Games (December 2023), and assesses the strategic logic of Rockstar's tonal choices. The aim is not to evaluate the leak itself — the leaked content is excluded from analysis as a matter of editorial policy — but to examine the public statement as a textual artefact: a deliberately constructed piece of corporate communication that, by industry standards, was anomalously brief, anomalously calm, and anomalously internally focused.
The statement, posted to @RockstarGames at approximately 15:00 BST on 19 September 2022, read as follows (Rockstar Games, 2022; archived at Web Archive, 2022):
'We recently suffered a network intrusion in which an unauthorized third party illegally accessed and downloaded confidential information from our systems, including early development footage for the next Grand Theft Auto. At this time, we do not anticipate any disruption to our live game services nor any long-term effect on the development of our ongoing projects. We are extremely disappointed to have any details of our next game shared with you all in this way. Our work on the next Grand Theft Auto game will continue as planned and we remain as committed as ever to delivering an experience to you, our players, that truly exceeds your expectations. We will update everyone again soon and, of course, will properly introduce you to this next game when it is ready. We want to thank everyone for their ongoing support through this situation.'
A parallel filing was made to Take-Two Interactive's investor-relations channel as an 8-K disclosure with the Securities and Exchange Commission on the same day, using near-identical wording but with the additional confirmation that the company did 'not expect any disruption to its current services nor any long-term effect on the development of its ongoing projects' (Take-Two Interactive, 2022).
Several textual features deserve immediate notice. First, the sentence structures are short and declarative: average sentence length is roughly twenty-two words, well below the forty-plus-word average typical of legalistic corporate breach notifications. Second, the verb 'shared' — 'to have any details of our next game shared with you all in this way' — is markedly soft; alternatives such as 'leaked', 'stolen', 'pirated', or 'disseminated' would have carried stronger connotations of crime or violation, but Rockstar selected the most neutral available verb. Third, the addressee 'you all' is the public, not the perpetrator; the statement is framed as an apology to viewers, not a warning to the thief. Fourth, although the words 'sad' do not appear verbatim in the rockstargames.com text, they did appear in the truncated headline framing widely reported and in subsequent Houser-attributed internal communications quoted by Bloomberg (Schreier, 2022b); 'extremely disappointed' is the on-the-record corporate analogue, and the affective register is consistent.
The default playbook for source-code or development-footage leaks in the games industry between 2017 and 2022 — visible in the responses to leaks affecting Valve, Nintendo, Capcom, Ubisoft, CD Projekt Red, and Bungie — combined three elements: confirmation kept to an absolute minimum or avoided entirely; an emphasis on the criminal nature of the act; and the threat or announcement of legal action, often via DMCA takedown notices against hosting platforms (Hernandez, 2022; Bailey, 2022). Rockstar deployed none of these.
The decision was strategic on several grounds. First, by the time the statement was issued, the leaked clips had been mirrored across dozens of file hosts and embedded in hundreds of YouTube reaction videos; legal threats would have been performative rather than effective, and would have generated a Streisand-effect amplification cycle (Hernandez, 2022). Second, journalist Jason Schreier of Bloomberg had independently verified the authenticity of the material with multiple sources inside Rockstar within twelve hours of the original GTAForums upload, meaning that any attempt to deny or hedge would have been contradicted in major industry coverage before publication (Schreier, 2022a). Authenticity confirmation was therefore the only credible posture available; the question was whether to deliver it tersely and legalistically or warmly.
Third, and most significantly, Rockstar was simultaneously preparing for an internal address to its development teams. According to subsequent Bloomberg reporting, Sam Houser sent a company-wide message on the same day expressing 'extreme disappointment' that 'so many of you had to watch your hard work appear online' (Schreier, 2022b). The external statement was effectively a redacted version of the internal one, calibrated so that staff reading the public Twitter post would recognise the same emotional language being used to defend them in public. A threats-and-takedowns statement would have been emotionally dissonant with that internal communication and would have signalled that Rockstar prioritised IP enforcement over staff welfare — a signal the company had explicit reason to avoid given its long-standing public reputation for crunch and the 2020 unionisation conversations that followed Red Dead Redemption 2's development (Schreier, 2020; D'Anastasio, 2018).
Three roughly comparable cases bracket the Rockstar statement and illuminate its choices by contrast.
CD Projekt Red, 9 February 2021. Following the HelloKitty ransomware breach that exfiltrated source code for Cyberpunk 2077, The Witcher 3, Gwent, and an unreleased Witcher 3 version, CDPR posted a multi-paragraph statement on Twitter that opened with the heading 'IMPORTANT UPDATE'. The text confirmed the breach, described the ransom note in full, explicitly refused to negotiate, and announced that 'relevant authorities' had been contacted including 'law enforcement' and 'IT forensics specialists' (CD Projekt, 2021). The verb 'stolen' appeared three times; the verb 'shared' did not appear at all. The statement made no reference to employees, developers, or staff morale. Its emotional register was procedural and defiant; its primary addressee was the ransom actor and, secondarily, investors who needed assurance that operational continuity was being managed (Makuch, 2021). At roughly two hundred and seventy words it was nearly twice the length of Rockstar's statement and contained no forward-looking commitment beyond a generic reference to ongoing work.
Bungie, 24 November 2022. Two months after the GTA VI leak, an unauthorised copy of the Destiny 2: Lightfall expansion trailer was uploaded to a YouTube channel ahead of its scheduled debut. Bungie's response was issued not as a corporate statement but as a series of replies from the official @DestinyTheGame account asking fans to 'please don't share' the material and stressing that the trailer was not finished (Bungie, 2022). The communication contained no acknowledgement of authenticity in formal terms, no reference to investigations, and no mention of staff. It was a damage-control note focused on protecting the rolling-reveal marketing plan, not a statement of the company's position on the leak as an event. It is the most minimal of the four cases compared here and provides a baseline of how little a publisher can say after a leak.
Insomniac Games, 18 December 2023. Following the Rhysida ransomware attack that exfiltrated approximately 1.67 terabytes of internal data including the entirety of the Marvel's Wolverine design materials, Insomniac issued a statement that, like Rockstar's, foregrounded staff (Insomniac Games, 2023; Carpenter, 2023). The text read in part: 'We are saddened and angered by this criminal attack on our studio... Our hearts go out to all our colleagues who have had their personal information compromised'. The vocabulary 'saddened', 'angered', and the reference to 'colleagues' closely parallel Rockstar's 'extremely disappointed' and 'our hard working team' — a deliberate echo, by some readings (Carpenter, 2023). Where the Insomniac statement differs is in the explicit naming of the criminal act ('criminal attack'), the explicit reference to personal-data compromise (which Rockstar, having not suffered comparable employee-data exposure, did not require), and the closing commitment to deliver the affected titles 'when they are ready' — a near-verbatim quotation of Rockstar's closing line, fifteen months later (Insomniac Games, 2023; Carpenter, 2023).
The pattern across the four cases is informative. CDPR optimised for legal and investor audiences. Bungie optimised for marketing-calendar containment. Insomniac, writing after Rockstar and apparently in conscious imitation, optimised for staff. Rockstar, writing first in this register, established the template.
The pairing 'sad and disappointed' — although 'sad' does not appear verbatim in the publicly released text, the phrase entered the discourse via Bloomberg's reporting on the Houser internal email and by industry-press paraphrase, and has since been used as shorthand for the entire 19 September statement (Schreier, 2022b; Hernandez, 2022; Bailey, 2022) — is notable as an emotional lexical choice for several reasons.
'Sad' is a low-arousal, internally directed affect term. It signals injury without anger, vulnerability without retaliation. In corporate-communications terms it is closer to a bereavement vocabulary than a crisis-management vocabulary. 'Disappointed', similarly, points to thwarted expectation rather than to violated rights; it implies that someone has fallen short of a hope, not that someone has committed a crime against a corporation. Compare the verb stock of CDPR's statement: 'stolen', 'attack', 'refuse to give in', 'contacted relevant authorities'. The Rockstar lexicon is conspicuously empty of legalistic or martial vocabulary.
One reading is that Rockstar made a calculated public-relations choice: anger would have invited mockery (the perpetrator was a teenager, eventually identified as a member of the Lapsus$ group, and prosecutorial action was already underway by UK authorities), while sadness invited sympathy (BBC News, 2022; Hern, 2023). Another reading, not exclusive of the first, is that the language was sincere — that the statement was drafted close to the immediate emotional response of senior staff who had spent five-plus years on the project and watched a portion of unfinished work circulate without context. Both readings can hold simultaneously; corporate statements can be both strategic and genuine.
A third feature of the lexical choice deserves attention: the absence of moral framing. The statement does not say the leak was 'wrong', 'unethical', or 'unfair'. It does not lecture. The closest it comes to moral judgement is the adjective 'illegally' applied to the access act, which is descriptive rather than denunciatory. This refusal to moralise is, again, anomalous; it reflects either confidence that the audience would moralise on Rockstar's behalf (which, in the event, the games press largely did) or a deliberate decision to model emotional restraint as a counter-signal to the leak itself, which arrived in the form of ninety raw, decontextualised, mocked-up videos.
The phrase 'our hard working team' is the rhetorical centre of gravity of the statement. Although the exact phrase comes from the Houser internal message quoted by Schreier (2022b), its public analogue — the references to 'our ongoing projects' and 'an experience... that truly exceeds your expectations' — is recognisably continuous. The statement is calibrated so that the same employee reading both versions would see consistency rather than contradiction.
The strategic value of developer-morale signalling in 2022 was substantial. Rockstar had spent the four years prior repositioning itself after the Red Dead Redemption 2 crunch controversy of October 2018, when Dan Houser's Vulture interview comments about '100-hour weeks' generated industry-wide criticism (Schreier, 2018; D'Anastasio, 2018). The company had implemented restructured working hours, reduced its reliance on heavy crunch in the post-2019 GTA Online update cycle, and, according to subsequent reporting, was navigating internal conversations about hybrid and remote work that had been complicated by the pandemic (Schreier, 2022b). A leak event that exposed unfinished work — work that, in the leaked clips, was visibly pre-alpha and unrepresentative of finished quality — risked re-igniting morale problems and triggering attrition at a moment when the company was deep into a long development cycle. The public statement's emphasis on staff served as a public commitment to internal solidarity, observable by current staff and by prospective recruits.
The decision to make staff the primary internal audience also had a secondary external effect: it framed the leak as an injury to workers rather than as a property crime against a corporation. This framing made the perpetrator look less like a folk-hero hacker and more like someone who had humiliated individual developers — a framing that aligned with the eventual public sympathy for Rockstar staff during the UK trial of the Lapsus$ member responsible (BBC News, 2022; Hern, 2023; Tidy, 2023).
The statement's final substantive sentence — 'we will update everyone again soon and, of course, will properly introduce you to this next game when it is ready' — is the only forward-looking commitment Rockstar made publicly about GTA VI between Take-Two CEO Strauss Zelnick's vague 2022 earnings-call references to the next Grand Theft Auto (Take-Two Interactive, 2022) and the formal Trailer 1 announcement in November 2023.
The sentence contains two distinct commitments: a near-term 'update everyone again soon' and a longer-term 'properly introduce'. The near-term commitment was, by most reasonable interpretation, not fulfilled; Rockstar did not publicly update the community on the leak's aftermath, the development impact, or the status of the project in any substantive way for fourteen months. The 'soon' was rhetorical rather than operational.
The longer-term commitment, however, was fulfilled with unusual precision. On 8 November 2023, Rockstar announced via Twitter/X that the first trailer for the next Grand Theft Auto would be released in early December 2023 (Rockstar Games, 2023a). On 4 December 2023, sixteen hours ahead of its scheduled debut after a separate leak forced an early release, Trailer 1 was published (Rockstar Games, 2023b; Carpenter, 2023). The interval from the 19 September 2022 statement to the 4 December 2023 trailer was approximately fourteen months and two weeks — close to fifteen months — which represents one of the longer formal 'reveal-to-properly-introduced' arcs in the franchise's history but fell comfortably within the implicit promise of the original sentence.
The word 'properly' is the key qualifier. It implicitly acknowledged that the leak had introduced the game improperly — without context, without artistic intent, in unfinished pre-alpha form — and committed Rockstar to producing a counter-introduction that would restore the company's preferred framing. Trailer 1, with its cinematic compositions, finished colour grading, licensed Tom Petty soundtrack, and clearly intentional placement of the Vice City and Jason-and-Lucia framings, functioned as exactly this counter-introduction: a deliberate aesthetic reassertion of authorial control over the property's public image (Rockstar Games, 2023b). In retrospect, the September 2022 statement and the December 2023 trailer can be read as a single bracketed communication event, with the trailer fulfilling the rhetorical promise made fifteen months earlier.
The fact that Trailer 1's release was itself partially forced by a separate leak the day before — a Twitter/X user posted the unannounced trailer file ahead of its scheduled debut, prompting Rockstar to bring the reveal forward by hours — added an ironic frame: Rockstar's 'proper introduction' was again disrupted by an unauthorised release, although on a much smaller and more controlled scale than the 2022 event (Carpenter, 2023). The company's response, again, was restrained: no statement of disappointment, no legal action, simply an early publication of the official version. The pattern held.
The 19 September 2022 Rockstar statement is publicly archived and quoted in full; the Take-Two 8-K filing is on the public record; the comparison statements from CDPR (February 2021), Bungie (November 2022), and Insomniac (December 2023) are all on the public record; the Bloomberg reporting on the parallel internal Houser message is well-sourced and has not been contested by Rockstar or Take-Two. These facts are high-confidence.
The analytical claims made in this report — that the language was strategically calibrated for internal-audience priority, that the contrast with CDPR signals different stakeholder optimisation, that the Insomniac 2023 statement consciously echoed the Rockstar template — are interpretative readings rather than documented strategic decisions. They are supported by side-by-side textual comparison and by contemporaneous industry-press commentary (Schreier, 2022b; Hernandez, 2022; Bailey, 2022; Carpenter, 2023), but they cannot be confirmed against internal Rockstar communications-strategy documents, which have not been publicly released. Confidence in the interpretative readings is moderate to high; confidence in any specific causal claim about drafting intent is lower.
The 'fulfilment' reading of the December 2023 trailer as a delivery on the September 2022 'when it is ready' line is post hoc; Rockstar has not publicly framed the two events as connected. The interval and the use of 'properly' are, however, documented, and the bracketing reading is at minimum a plausible structural one. Confidence: moderate.
Bailey, K. (2022) 'Rockstar Games confirms GTA 6 leak, says development continues "as planned"', USgamer, 19 September. Available at: https://www.usgamer.net/articles/rockstar-games-confirms-gta-6-leak (Accessed: 12 May 2026).
BBC News (2022) 'Teenager charged with hacking offences after GTA 6 leak', BBC News, 24 September. Available at: https://www.bbc.co.uk/news/technology-63029252 (Accessed: 12 May 2026).
Bungie (2022) '@DestinyTheGame statement on Lightfall trailer leak', Twitter/X, 24 November.
Carpenter, N. (2023) 'Insomniac Games breached in cyberattack, Wolverine assets leak online', Polygon, 19 December. Available at: https://www.polygon.com/24007863/insomniac-games-cyberattack-wolverine-leak (Accessed: 12 May 2026).
CD Projekt (2021) 'Important Update', Twitter/X, @CDPROJEKTRED, 9 February.
D'Anastasio, C. (2018) 'Inside Rockstar Games' culture of crunch', Kotaku, 23 October. Available at: https://kotaku.com/inside-rockstar-games-culture-of-crunch-1829936466 (Accessed: 12 May 2026).
Hern, A. (2023) 'GTA 6 hacker handed indefinite hospital order', The Guardian, 25 August. Available at: https://www.theguardian.com/games/2023/aug/25/gta-6-hacker-handed-indefinite-hospital-order (Accessed: 12 May 2026).
Hernandez, P. (2022) 'Rockstar Games confirms the GTA 6 leaks are real', Polygon, 19 September. Available at: https://www.polygon.com/23360787/rockstar-games-statement-gta-6-leak (Accessed: 12 May 2026).
Insomniac Games (2023) 'Statement on the recent cybersecurity incident', insomniac.games, 18 December.
Makuch, E. (2021) 'CD Projekt Red hit by ransomware attack, source code for Cyberpunk 2077 and Witcher 3 stolen', GameSpot, 9 February. Available at: https://www.gamespot.com/articles/cd-projekt-red-hit-by-ransomware-attack-source-code-for-cyberpunk-2077-and-witcher-3-stolen/1100-6487327/ (Accessed: 12 May 2026).
Rockstar Games (2022) 'Statement on recent network intrusion', rockstargames.com / @RockstarGames Twitter/X, 19 September.
Rockstar Games (2023a) 'Trailer 1 announcement', @RockstarGames Twitter/X, 8 November.
Rockstar Games (2023b) 'Grand Theft Auto VI Trailer 1', YouTube and rockstargames.com, 4 December.
Schreier, J. (2018) 'Inside Rockstar Games' culture of crunch', Kotaku, 23 October.
Schreier, J. (2020) 'Inside Rockstar's plan to overhaul its work culture', Bloomberg, 18 May. Available at: https://www.bloomberg.com/news/articles/2020-05-18/inside-rockstar-s-plan-to-overhaul-its-work-culture (Accessed: 12 May 2026).
Schreier, J. (2022a) 'Take-Two falls after hacker leaks Grand Theft Auto VI videos', Bloomberg, 19 September. Available at: https://www.bloomberg.com/news/articles/2022-09-19/take-two-falls-after-hacker-leaks-grand-theft-auto-vi-videos (Accessed: 12 May 2026).
Schreier, J. (2022b) 'Rockstar Games tells staff GTA VI development will continue as planned', Bloomberg, 19 September.
Take-Two Interactive (2022) 'Form 8-K Current Report', filed with the United States Securities and Exchange Commission, 19 September.
Tidy, J. (2023) 'GTA 6: Teen hacker found to have committed offences over Rockstar leak', BBC News, 23 August. Available at: https://www.bbc.co.uk/news/technology-66576181 (Accessed: 12 May 2026).
Web Archive (2022) 'Snapshot of rockstargames.com/newswire, 19 September 2022', archive.org. Available at: https://web.archive.org/ (Accessed: 12 May 2026).