Tweet
One of the hackers that accessed Rockstar Games servers, stole data related to Grand Theft Auto 6, and subsequently leaked the stolen data online has been sentenced to an indefinite hospital order. Arion Kurtaj is the name of the hacker that will now be indefinitely detained at a secure hospital until it is determined that he is no longer a danger.
According to a report by the BBC, Kurtaj suffers from severe autism and has been deemed unfit to stand trial. Kurtaj has reportedly been "violent while in custody," having been responsible for dozens of reports of "injury or property damage." The judge says that due to Kurtaj's "skills and desire to commit cyber-crime" he was a high risk to the public.
As part of the sentencing hearing, a mental health assessment for Kurtaj said that he "continued to express the intent to return to cyber-crime as soon as possible. He is highly motivated."
Kurtaj is a member of the ransomware group named Lapsus$. This group has claimed responsibility for hacking a number of large companies in recent years. They have claimed responsibility for hacking into companies like Samsung, Uber, Nvidia, and Rockstar Games.
Following the hack of Nvidia, Kurtaj was out on bail and placed in police protection at the Travelodge hotel. Despite having his laptop confiscated, Kurtaj was able to hack into Rockstar using an Amazon Firestick, his hotel room TV, and a mobile phone. All told, Kurtaj was able to come away with pieces of source code for a few Rockstar developed titles and over 90 clips of Grand Theft Auto 6.
Another member of Lapsus$ was also found guilty at the same trial. Due to being just 17-years old, their name was not disclosed to the public. Working with Kurtaj and other members of Lapsus$, this 17-year old was found guilty of hacking Nvidia, phone company BT/EE, and even stole directly from individuals via their crypto wallets. This teen was also sentenced for an "unpleasant and frightening pattern of stalking and harassment" of two young women.
This 17-year old was sentenced to 18 months in a Youth Rehabilitation Order. They will be under "intense supervision" and are banned from using VPNs online.
Kurtaj and the unnamed 17-year old are the first members of Lapsus$ to be convicted. Other members of Lapsus$ are thought to still be at large.
