An 18-year-old has been sentenced for his role in a string of cyber-attacks in 2022. During the seven-week trial, it was revealed that the teenager used only an Amazon Fire Stick, a Travelodge TV, and a newly purchased smartphone to obtain dozens of GTA 6 clips before the game had been announced.
Arion Kurtaj was arrested twice in early 2022, following a spate of high-profile, successful cyber attacks that targeted major tech companies such as Microsoft, Nvidia, and BT. Whilst in police custody, after having been doxxed by rival hackers, Kurtaj then breached Rockstar Games' messaging service and retrieved 90 videos of development footage from GTA 6, before leaking the footage online.
According to the BBC, Kurtaj was able to connect to cloud computing services by using a Fire Stick that had been left behind in the room by a previous occupant. From here, the teenager was able to access Rockstar's Slack and post his ransom demands, threatening to release GTA 6's source code publically.
However, before further damage could be done, City of London Police caught the teenager red-handed in his hotel room.
Rockstar wasn't even the only company targeted in Kurtaj's final spree; the 18-year-old was also allegedly helping other hackers to attack the online bank Revolut and the ride-hailing service Uber whilst in police custody.
Kurtaj was a member of the notorious Lapsus$ cyber-crime group, which has carried out a spate of high-profile cyber attacks over the last few years. From major tech companies, such as Microsoft and Nvidia, to telecommunications companies such as BT and EE, Lapsus$ quickly gained notoriety thanks to the frequency and severity of their cyber-attacks.
In Kurtaj's trial, which has now concluded, the prosecution described Kurtaj's actions as "juvenile", particularly concerning how Lapsus$ members would often leave behind offensive messages to affected staff members following a hack. Kurtaj has now been sentenced to an indefinite, lifetime hospital order, after expressing a blatant intent to commit further cybercrime should he be released.
Another 17-year-old involved in the Lapsus$ gang was also sentenced in the same trial as Kurtaj. Both individuals are uninvolved with the more recent breach at Rockstar that saw the GTA 6 trailer leak online days before its official reveal.
Video game leaks in particular are under high scrutiny at the moment, following the recent devastating cyber attack against Spider-Man 2 developer Insomniac Games. Such intrusive hacks and leaks are becoming less likely to be viewed as harmless and victimless crimes, particularly given how highly stressful and upsetting the ordeal can be for video game developers.