A shift from takedowns to identification

Take-Two Interactive has begun using the US copyright system to seek identifying information connected with the online persona “Cyberleek” and accounts alleged to have distributed unauthorised Grand Theft Auto VI material. The reported requests target Microsoft and Discord, two platforms that may hold account, connection or hosting records relevant to the leaks.

The move marks an escalation beyond the familiar cycle of copyright takedowns. Removing a clip from a social platform can limit distribution, but it does not establish who first obtained, uploaded or coordinated the release of confidential material. A subpoena aimed at a service provider is designed to close that gap by connecting an online alias to records held by the platform.

The timing gives the case unusual importance. Rockstar Games lists Grand Theft Auto VI for release on November 19, 2026, leaving less than three months before one of the industry’s most closely watched launches. For a publisher, leaked gameplay can interfere with a carefully sequenced marketing campaign, reveal features before they are ready to be shown and complicate efforts to control public expectations.

What the requests seek

Reporting on the filings says that Take-Two is seeking information sufficient to identify the user or users associated with Cyberleek, as well as records connected to named Discord accounts and servers. The reported scope includes conventional subscriber data such as account registration details, email addresses, IP addresses, telephone numbers and linked accounts. The Microsoft request is also reported to seek records relating to an internal investigation of the Cyberleek persona.

That breadth is central to the story. Internet identities are often fragmented across usernames, devices, cloud accounts and communications platforms. A single account record may be inconclusive; cross-referencing registration data, log-in history and account connections can be more useful in establishing whether separate aliases are associated with one person or group.

However, an application or issued subpoena is not proof that a platform possesses every requested record, that it will disclose every category sought, or that the alleged leaker has been identified. Platforms can assess whether legal demands are valid and sufficiently specific, and they may seek to narrow or challenge requests they consider defective or overly broad. The public action is therefore an investigative step, rather than a finding of liability.

The DMCA mechanism

The legal route reportedly used by Take-Two is a Digital Millennium Copyright Act subpoena under section 512(h) of US copyright law. The provision lets a copyright holder ask a federal court clerk to issue a subpoena to a service provider to obtain information sufficient to identify an alleged infringer.

This process has a narrower immediate purpose than a full copyright lawsuit. The copyright owner supplies a takedown notice, a proposed subpoena and a sworn declaration that the information is being sought to identify an alleged infringer and protect copyright rights. If the statutory requirements are met, the clerk may issue the subpoena without first conducting a trial on whether infringement occurred.

That distinction matters in assessing the significance of the filings. Neither Microsoft nor Discord is being accused of creating the leaked material merely because it receives a subpoena. They are third-party services from which Take-Two seeks records. Nor does the process itself determine whether Cyberleek is one person, a group, an insider, an outside intruder or an account used by someone else.

If Take-Two identifies a suspect, it would still need to decide what further action is justified. Possible routes could include a civil copyright claim, trade-secret allegations, breach-of-contract action where an employment or testing relationship exists, or referral to law enforcement if evidence suggests criminal conduct. Each path would involve different legal standards and factual questions.

Privacy and proportionality questions

The reported requests have also drawn attention because they may reach beyond a single named account. Requests for information about users present in specified online communities can raise difficult proportionality questions, particularly where people may have viewed, discussed or reposted material without participating in the original acquisition or upload.

Service providers generally distinguish between subscriber information and user content, and their policies commonly require private litigants to use valid legal process. Microsoft states that it reviews civil demands for customer data, requires targeted requests tied to specific accounts or identifiers, and generally gives customers notice unless legally prohibited. Discord’s transparency materials likewise describe legal and intellectual-property requests as part of its compliance work.

Those policies do not predict the response in this particular matter. They do show why the final outcome may be more limited than the language of a request suggests. The relevant companies can assess the form of the subpoena, the records actually available and the restrictions that apply to different kinds of data.

For users who happened to be members of a named server, the case is a reminder that participation in a private or semi-private online community does not necessarily make data unreachable through civil legal procedures. It also does not make every participant responsible for another user’s alleged infringement. Responsibility would depend on evidence about individual conduct, knowledge and involvement.

A familiar problem at a larger scale

Rockstar and Take-Two have long had strong incentives to defend unreleased work. Yet Grand Theft Auto VI creates an exceptional target: its scale, years of anticipation and central place in popular culture ensure that even brief clips can travel quickly across social platforms, file-sharing channels and repost accounts.

The immediate benefit of Take-Two’s strategy is deterrence. A visible effort to identify the source can make would-be distributors less willing to host, mirror or promote unreleased material. The longer-term benefit, if the trail is substantiated, is that it may reveal how the material moved from a confidential environment into public circulation.

There are limits to that strategy. Online material can be copied faster than it can be removed, while technical data may point only to intermediary accounts, compromised devices or anonymising services. A subpoena is an important investigative tool, but not a guarantee of attribution.

For now, the filings show that Take-Two is pursuing the source of the leaks rather than relying solely on removals. Whether the requests produce a definitive identification will depend on the records held by Microsoft and Discord, the scope ultimately allowed, and the evidence that can link any account data to the alleged distribution of Grand Theft Auto VI content.

Sources