Take-Two Subpoenas Discord And Microsoft To Track Down GTA 6 Leaker

Take-Two is taking its hunt for the GTA 6 leaker straight to federal court, and it’s not being subtle about how wide a net it’s casting.

What Take-Two Is Actually Asking For

Take-Two has filed multiple subpoenas in the Southern District of New York seeking records tied to the recent spread of leaked GTA 6 gameplay footage, according to Kotaku. One filing, dated August 20, states that “the copyrighted material includes but is not limited to audiovisual content, artwork, images, dialogue, or other creative elements,” and confirms Take-Two’s counsel has sworn the subpoena is meant “to obtain the identity of an alleged infringer or infringers.”

The Microsoft subpoena gives the company until September 4 to produce “all internal Microsoft business records and investigative records associated with Microsoft’s internal investigation of the ‘cyberleek’ persona sufficient to identify the user(s), person(s) and/or entity/ies associated with that persona.”

It also demands identifying details for any Discord accounts tied to specific servers going back to June 1, 2026, including registration emails, login IP addresses, phone numbers, linked Xbox or Google accounts, device identifiers, and any GTA or Rockstar-related content found in those users’ OneDrive accounts.

Discord faces the same September 4 deadline for records tied to accounts and servers linked to the handles “CYBERLEEK,” “CINEMATICROCKSTAR,” and “Surfer24k™,” along with related servers including “Ødyssey.gg” and the editors’ server for DarkViperAU, the popular GTA streamer whose real name is Matthew Judge. Nothing in the filings suggests DarkViperAU himself is implicated in the leaks, only that Take-Two wants records from a server connected to his channel as part of the broader investigation.

Who’s Actually Being Investigated

Cyberleek’s identity remains unknown, and neither Rockstar nor Take-Two has publicly commented on the leaks beyond the legal filings themselves. The leaks have circulated under that alias from a site hosting a manifesto calling on game companies to end practices like digital-only preorders and day-one single-player DLC, similar to concerns raised by groups like Stop Killing Games, which has separately condemned Cyberleek’s methods.

That manifesto has also promoted a cryptocurrency meme coin tied to Cyberleek’s name, which multiple outlets have flagged as evidence the leaks may be at least partly a profit-driven scheme rather than a purely ideological protest.

This isn’t the first time a GTA 6 leak investigation has led back to a real identity. The 2022 breach, which leaked over 90 clips and source code after a hacker compromised Rockstar’s internal Slack, was eventually traced to a 17-year-old member of the hacking group Lapsus$, who was arrested within days.

Subpoenas like these are part of how that kind of identification typically happens, working backward from platform records to a real person behind an anonymous account. Whether this round of leaks ends the same way remains to be seen, but Take-Two clearly isn’t waiting around to find out.