Teen Hacker Sentenced to Hospital Prison for GTA 6 Leak

Explore the extraordinary case of an 18-year-old hacker sentenced to hospital prison for leaking GTA 6 gameplay. A gripping tale of cybercrime, mental health, and legal complexities.


12/31/20232 min read

Teen Hacker Sentenced to Hospital Prison for GTA 6 Leak

In a groundbreaking legal case that intertwines cybercrime, mental health, and digital security, Arion Kurtaj, an 18-year-old hacker, has been sentenced to indefinite custody in a secure hospital following his involvement in the leak of the video game Grand Theft Auto VI (GTA 6).

Background of the Case

  • Incident Overview: Arion Kurtaj, associated with the cybercrime group Lapsus$, breached Rockstar Games' system, leading to a significant leak of GTA 6 content. This hack, occurring in September 2022, was notable for its execution using rudimentary equipment: a hotel TV, Amazon Firestick, and mobile phone.

  • Previous Hacking Activities: Kurtaj’s hacking history includes infiltrations into major companies like Nvidia and BT/EE, which led to the confiscation of his laptop by authorities.

Legal Proceedings and Sentencing

  • Date of Sentencing: On December 21, 2023, Kurtaj received his sentence from a UK court.

  • Nature of Sentence: The court ordered an indefinite hospital sentence for Kurtaj, mandating his stay in a secure hospital until deemed no longer a threat. This decision was based on Kurtaj's autism diagnosis and a mental health assessment that suggested a high risk of recidivism in cybercrime​​​​.

  • Incidents of Violence: Reports of violence and property damage by Kurtaj while in custody were significant factors in the sentencing process​​.

Co-Conspirator and Collaborative Hacks

  • 17-Year-Old Lapsus$ Member: An unnamed 17-year-old member of Lapsus$ was also tried and found guilty, receiving an 18-month Youth Rehabilitation Order with strict supervision, including a VPN usage ban​​.

  • Scope of Hacking Activities: The duo's hacking activities spanned beyond Rockstar Games, impacting several tech giants and leading to attempted extortion.

Discussion and Implications

  • Cybersecurity Concerns: This case sheds light on the evolving nature of cyber threats, emphasizing the need for advanced security measures in vulnerable industries like gaming.

  • Mental Health in Legal Context: The sentencing reflects a nuanced approach to legal proceedings involving individuals with mental health conditions, balancing public safety concerns with the need for appropriate care and rehabilitation.

  • Future of Cybercrime Legislation: The case sets a precedent in the legal handling of cybercrime, especially involving young perpetrators with mental health challenges. It underscores the complexity of cybercrime in the digital age and the necessity for legal systems to adapt accordingly.


Arion Kurtaj’s case is a poignant example of the intricate relationship between cybercrime, mental health, and legal justice. It highlights the challenges faced by legal systems in adjudicating tech-related crimes perpetrated by individuals with mental health issues. As the digital landscape evolves, this case will likely serve as a reference point for future cybercrime legislation and the treatment of young offenders with mental health conditions.