Analysis · Updated

Take-Two's GTA 6 subpoena asks Discord to identify everyone in three servers

The DMCA subpoena Take-Two filed on August 20 does not stop at the leaker. It asks Discord for identifying data on every account in three named servers since June 1.

The legal instrument Take-Two filed against the GTA 6 leaks is a subpoena "for identification of an alleged infringer." What it actually requests is identifying information on every account that has been a member of three Discord servers since June 1 — including one belonging to a GTA streamer who says the leaked clips were never posted there.

The two DMCA subpoenas were filed in the Southern District of New York on August 20 and reported by Kotaku, which published the text. The Discord request names the handles you would expect — CYBERLEEK, CINEMATICROCKSTAR, Surfer24k and two replacement handles — and then asks for "all identifying information associated with all user accounts that are/were members communicating with the Discord server(s) listed below during the time period from June 1, 2026 to present." Per account, it wants the account ID, registration email, registration and last-login IP addresses, phone number, linked Google and Xbox connections, device identifiers, and any GTA-, Rockstar- or Cyberleek-related content sitting in that person's OneDrive.

One of the named servers belongs to a streamer who says he has nothing

The server list includes Ødyssey.gg, the public "! Odyssey" guild, and the Discord of Matthew Judge — the Australian GTA 5 creator DarkViperAU, who has been making Grand Theft Auto content for years and has never been connected to the leaks. He answered publicly on August 21: "They're asking for my discord info, I'm mentioned by name. I don't know anything. That isn't my editors discord. There aren't even any clips of the leaks in either of my Discords."

Whether or not he is right about the clips, the drafting is the point. A server full of ordinary GTA fans is a haystack, and the request treats the whole haystack as the unit of production.

What section 512(h) actually authorises

Section 512(h) of the DMCA is a narrow, fast door. A rights holder files a sworn declaration that the purpose is "to obtain the identity of an alleged infringer" and that the information will only be used to protect its copyright, and the court clerk signs the subpoena. No judge weighs the merits, no lawsuit has to exist, and the person being unmasked gets no chance to argue first. Take-Two's filing recites exactly that declaration.

The mismatch is between the singular in the statute and the plural in the request. A demand for the phone number and login IPs of everyone who spoke in a community server over nearly three months is not identification of an alleged infringer; it is a membership list with contact details attached. The only real check left is the service provider — Discord and Microsoft can object or move to quash, and both have until September 4 to respond.

The Microsoft half says more about the investigation

The other subpoena asks Microsoft for "all internal Microsoft business records and investigative records associated with Microsoft's internal investigation of the 'cyberleek' persona." That sentence assumes an investigation that already exists. Take-Two is not asking Microsoft to start looking; it is asking for the file Microsoft has already opened, plus telemetry, machine identifiers and OneDrive contents.

That is where the pressure sits. The clips themselves keep arriving — a sixth video landed on August 21 after a day of silence that had people assuming an arrest — and Rockstar still has not said a word publicly about any of it. The September 4 deadline falls a week after the Extended Look premieres on Netflix on August 27 and eleven weeks before launch. Rockstar's own reveal, the leaker's release schedule and the paperwork trying to unmask him are now running in the same three weeks.