An 18-year-old hacker, who leaked clips of a forthcoming Grand Theft Auto (GTA) game, was sentenced to indefinite detention in a hospital.
Arion Kurtaj from Oxford was a key member of international gang Lapsus$ and launched a number of cyber attacks on tech giants, including hacking into the systems of Uber, Nvidia, and Rockstar Games. He accessed information on around 5,000 Revolut consumers and caused Uber nearly $3 million of damage to Uber. Rockstar Games told the court that it took thousands of hours of staff time and $5m to recover from the hack.
In the case of Rockstar Games, Kurtaj stole 90 clips from the Grand Theft Auto VI, which is one of the most highly anticipated video game releases of all time and then broke into the company’s internal Slack messaging, informing them that “if Rockstar does not contact me on Telegram within 24 hours I will start releasing the source code.” He later published the source code and the clips on an online forum.
Kurtaj carried out the Grand Theft Auto hack while on bail awaiting sentencing for the other cyberattacks. He had his laptop confiscated at the time but he used an Amazon Fire TV stick, his mobile phone, and a hotel television to steal the GTA clips.
Kurtaj, who is autistic, was deemed unfit to stand trial. Instead, the jury didn’t rule on his guilt but decided on whether he committed the acts. Judge Patricia Lees, who presided over the case, sentenced him to indefinite detection as Kurtaj remained “determined to commit further serious offences if the opportunity arose.” She added that Kurtaj should be placed in a secure hospital and remain there until he no longer poses a risk to the public.
Judge Lees also explained that while the GTA hack didn’t seriously harm the game developer, this and his other hacks still caused real harm on the companies and individuals that were on the receiving end of the cyberattacks Kurtaj took part in.