News

GTA 6 Leaker Investigation: Take-Two Seeks Sealed Discord Subpoena

Grand Theft Auto VI cover art
Big Brain
Big Brain
Published
9/1/2026
Read Time
5 min

Take-Two is asking a federal court for a second, sealed Discord subpoena in its GTA 6 leaker investigation, while dropping a YouTube request as the probe shifts.

Grand Theft Auto VI cover art

Image: IGDB

Take-Two wants a second Discord subpoena, and this one would stay hidden

Take-Two Interactive has returned to federal court seeking another subpoena aimed at Discord as part of its GTA 6 leaker investigation, according to filings reported by TorrentFreak and covered by VGC, GamingBolt, PC Gamer, and Wolf’s Gaming Blog. The key change is secrecy: Take-Two is asking the court to keep the specific demands in the new Discord request under seal.

That makes the latest Take-Two court filing more significant than a routine follow-up. Earlier subpoena requests publicly revealed the platforms, servers, handles, and categories of data Take-Two was pursuing in response to the recent Grand Theft Auto 6 leak. This time, Take-Two argues that showing its hand could alert the alleged infringer or infringers and give them time to delete, destroy, conceal, or otherwise move evidence.

The company’s own language frames the investigation as active and shifting. In a separate filing quoted by VGC and GamingBolt, Take-Two said its investigation into people responsible for posting infringing content on YouTube and elsewhere online has been “evolving rapidly” as new information becomes available. The new Discord request is the clearest public signal so far that the company believes it has moved from broad platform discovery toward more targeted identity work.

What Take-Two is seeking from Discord

The original Take-Two Discord subpoena, reported by Kotaku, CNET, Variety, and IGN, sought identifying information connected to accounts and servers allegedly tied to the circulation of GTA 6 material. CNET reported that the filing listed account names and sought data that could identify users, including original message logs, IP access logs, email addresses, phone numbers, connected accounts, linked services such as Google and Xbox, backend metadata, telemetry, and device identifiers.

Kotaku reported that the earlier Discord demand included records for user accounts that were members communicating with named Discord servers during a period beginning June 1, 2026. The named items included references to “CYBERLEEK,” “CINEMATICROCKSTAR,” “Surfer24k™,” “Ødyssey.gg,” the “‘! Odyssey’ public brand guild,” and the “DarkViperAU editors’ server.” Being listed in a subpoena request is not the same as being accused of leaking GTA 6, and at least one creator connected to a named server publicly denied wrongdoing, according to IGN.

The second Take-Two Discord subpoena appears narrower, based on the portions of the filing described publicly. VGC reported that the new request focuses on one previously identified Discord user and one additional user. GamingBolt reported that Take-Two says it has identified one additional Discord user, obtained additional identifying information for a previously identified user, and gathered more information about community servers named in the earlier subpoena. Because Take-Two wants the details sealed, the public record does not show exactly what new account data, logs, or metadata it is asking Discord to produce.

The sealed filing changes the shape of the investigation

A DMCA subpoena can allow a rightsholder to seek information from a service provider to identify alleged infringers without filing a full lawsuit first, as GamingBolt noted in its explanation of Take-Two’s approach. That mechanism is the legal backbone of the Take-Two Discord subpoena push, but the move to seal the new demand changes the stakes.

Take-Two’s stated concern is evidentiary. In language quoted by VGC and GamingBolt, the company warned that public disclosure could “compromise Take-Two’s ongoing investigation” and “tip off the alleged infringers” about the nature and progress of the investigation, creating a risk that evidence could be deleted, destroyed, concealed, or that alleged infringers could take further steps to evade identification.

As a strategic read, this suggests Take-Two is trying to protect investigative leverage. The first round established a broad map of where the company believed the Grand Theft Auto 6 leak had moved online. The second request, at least as described in public reporting, looks like an attempt to connect that map to specific users while preventing the targets from learning which accounts or server activity are now under scrutiny.

That does not confirm that Take-Two has identified the person or group behind CyberLeek. Wolf’s Gaming Blog made that point directly, noting that public filings do not name the person behind the leaks. What is confirmed is narrower but still important: Take-Two says it has new information, wants more targeted Discord records, and believes publication of the request could damage the investigation.

Take-Two dropped its YouTube request as the trail shifted

The Discord filing landed alongside a notable retreat elsewhere. VGC reported that Take-Two withdrew a previous subpoena request for information from YouTube. GamingBolt reported that the dropped Google and YouTube request had targeted three personas allegedly connected to a leaked video: CyberLeeks, Surfer24k, and CyberLeek_ar_io.

According to GamingBolt, Judge John P. Cronan had not signed off on the YouTube subpoena and had asked Take-Two for more detail about how the three personas were connected to the case. Take-Two then told the court it no longer needed that particular information. The company’s legal representative wrote, as quoted by VGC and GamingBolt, that the situation had progressed and that Take-Two had determined it no longer required the requested information.

That withdrawal is easy to misread as a step back. In context, it looks more like a reallocation of pressure. Take-Two is not abandoning the Rockstar GTA 6 leaks probe in the public record. It is dropping one platform demand while pursuing another Discord demand under seal. For readers tracking the investigation, the most relevant fact is that the company’s target set appears to be changing as new information arrives.

The Microsoft and Discord timeline still has unresolved wrinkles

The first wave of subpoenas also included Microsoft. Kotaku reported that Take-Two sought Microsoft records related to a GitHub repository where infringing content was allegedly posted, along with information connected to Xbox accounts, profiles, OneDrive content, internal Microsoft business records, and investigative records associated with the “cyberleek” persona. Variety reported that Microsoft Xbox CTO Scott Van Vliet posted on X that Microsoft was working closely with Take-Two and Rockstar Games to support efforts to protect creative works and intellectual property.

Discord’s public posture has been more guarded. IGN reported that Discord marketing director Ryan K. Rigney said on August 24 that Discord had not yet been served with a subpoena from Take-Two, and that when it was received, Discord would “evaluate the validity and scope before responding.” Variety separately quoted a Discord spokesperson saying the company reviews and complies with valid DMCA subpoenas when it receives them.

There is some tension in the reported timeline. Wolf’s Gaming Blog, citing TorrentFreak, noted that Take-Two’s later filing said the original August 21 subpoena was “promptly served on Discord,” while Discord had publicly said on August 24 that it had not yet received it. Wolf’s Gaming Blog also reported that the court docket did not appear to show the clerk formally issuing it in the usual way, leaving the exact service timing unclear from the public record.

The scope debate is also part of the story. IGN reported criticism from Reclaim The Net, a free speech and privacy advocacy group, which argued that Take-Two’s Discord subpoena risked exposing users who did not leak or upload GTA 6 footage but participated in conversations within servers where leaks were discussed. That criticism does not decide the legal question, but it shows the pressure point: a publisher trying to identify alleged copyright infringers through platform records, and communities concerned about how much user data could be swept into that process.

Rockstar’s leak crackdown is becoming a launch-control strategy

The recent Grand Theft Auto 6 leak began circulating before an official extended look tied to Netflix, according to VGC. Variety reported that several GTA 6 gameplay videos were released by a group calling itself CyberLeek, which claimed to have obtained a playable build of the game, and that the videos were posted across multiple sites, removed, and then appeared in new locations. VGC reported that reuploads across social media reached millions of views.

Rockstar has not publicly confirmed the authenticity of the alleged GTA 6 leaks or issued a statement about the situation beyond the subpoenas, according to Variety. That distinction matters. The court filings allege copyright infringement and misappropriation of confidential Take-Two information, but the public record still does not provide an official Rockstar breakdown of what the footage showed, what build it came from, or whether any apparent features represent final game content.

From a long-term strategy perspective, the crackdown fits the business reality around GTA 6. CNET reported that the game is still months from release and described industry expectations around its November launch window as unusually intense, with other publishers reportedly avoiding that period. The official marketing cadence is valuable because Take-Two and Rockstar control timing, quality, framing, and platform messaging. A leak disrupts that control, especially if unfinished footage becomes the basis for public judgment.

That is the practical reading of the Take-Two court filing: this is not only about removing clips after they spread. The company is trying to identify the source path, pressure the platforms where the material moved, and reduce the odds of repeated leaks before launch.

What readers can safely conclude, and what remains unknown

The confirmed part is clear. Take-Two has pursued DMCA subpoenas connected to the Rockstar GTA 6 leaks. It previously sought data from Microsoft and Discord, later pursued other platform requests, withdrew a YouTube request, and is now seeking a second Discord subpoena with the details sealed. Public reporting says the new Discord request is focused on one previously identified user and one additional user, but the sealed filing means readers should not expect a full public list of Take-Two’s current targets.

What remains unconfirmed is equally important. Public filings do not identify the person or people behind CyberLeek. They do not prove that every named server, account, or community member was involved in leaking GTA 6. They also do not establish that leaked footage reflects the final version of Grand Theft Auto 6.

For players, the safest guidance is boring but useful: treat leaked clips as legally disputed, incomplete, and potentially unrepresentative of the finished game. If you want reliable information on release timing, official footage, features, pricing, platforms, or availability, wait for Rockstar, Take-Two, or official storefront listings rather than Discord reposts or social media mirrors. For creators and community moderators, the broader lesson from the Take-Two Discord subpoena fight is sharper. Discussing leaks and hosting leaked material can create very different legal exposure, but platform records can still become part of an investigation when publishers claim copyrighted content moved through a community.

Share: