GTA 6 Leaks Panic: Rockstar Subpoenas Microsoft & Discord to Unmask Hackers

The gaming world witnessed a major legal showdown when Take-Two Interactive, the parent company of Rockstar Games, launched an intense legal hunt to catch who is behind the latest Grand Theft Auto VI content leaks. Federal court filings confirm that Take-Two has officially hit tech giants Microsoft and Discord with legal subpoenas to unmask an anonymous leaker operating under the handle Cyberleek.

The legal action follows days of unauthorized video uploads showing early gameplay footage, character actions, and map details from GTA 6. By invoking the Digital Millennium Copyright Act (DMCA), Rockstar Games aims to force social networks and cloud hosts to surrender private user data, IP logs, and connected accounts.

Operational Aspect	Legal & Technical Execution Details
Primary Target & Persona	Cyberleek (and associated handles including CYBERLEEK, CINEMATICROCKSTAR, Surfer24k, and cyberleek_ar_io)
Court Jurisdiction & Filings	U.S. District Court for the Southern District of New York (SDNY) (DMCA 512(h) subpoenas filed by Kirkland & Ellis on behalf of Take-Two Interactive)
Subpoenaed Platforms	Microsoft Corporation (GitHub & OneDrive), Discord Inc., X Corp., and Google/YouTube
Demanded Records & Scope	• Account Identifiers: User IDs, registration emails, phone numbers, and connected service accounts. • Telemetry & Network Logs: Registration and last-login IP addresses, device identifiers (MachineGuid/MSA), and server metadata. • Storage & Content: Internal Microsoft/GitHub investigative records, cloud files tied to GTA on OneDrive, and server message history since June 1, 2026.
Core Legal Claim & Motive	Unlawful extraction, reproduction, and public dissemination of copyrighted, unreleased Grand Theft Auto VI gameplay assets coupled with cryptocurrency promotion and extortion attempts.

Why Rockstar Games Is Taking Radical Legal Action

Video game leaks damage carefully planned marketing schedules and expose unfinished development code to the public. The leaker group known as Cyberleek began publishing short clips on file-sharing sites, social networks, and chat forums. These clips showed one of the main playable characters driving through Vice City, interacting with game systems, and engaging in police chases.

What makes this situation urgent for Rockstar Games is the fear that the leakers hold a playable build of the entire game. Cyberleek also attempted to monetize the situation by promoting a custom cryptocurrency on social channels, promising to release more stolen video clips if certain financial goals were met.

To put an immediate end to the unauthorized sharing, Rockstar's legal team decided to target the infrastructure platforms where the files were uploaded and discussed.

Investigation Stage	Key Operational & Legal Actions
1. Primary Leak Event	Unauthorized Dissemination: The threat actor operating under the "Cyberleek" alias begins releasing leaked gameplay footage, cutscenes, and source material extracted from an unreleased GTA 6 build, paired with anti-digital-ownership manifestos and cryptocurrency promotions.
2. Emergency Filings	17 U.S.C. § 512(h) Petitions: Legal counsel for Take-Two Interactive files emergency DMCA petitions in the U.S. District Court for the Southern District of New York (SDNY) targeting infringing repositories and distribution channels.
3. Court Subpoenas	Judicial Authorization: Federal court grants DMCA subpoenas compelling tech platforms—including Microsoft (GitHub/OneDrive/Xbox), Discord, X Corp., and Google/YouTube—to produce records by September 4, 2026.
4. Telemetry Collection	Technical Asset Demands: Platforms are required to surrender user IDs, registration/last-login IP addresses, phone numbers, connected accounts, OneDrive files, and Windows hardware markers (MachineGuid and MSA values).
5. Law Enforcement & Tracking	Unmasking & Extradition Scope: Federal cyber investigators and private forensics teams analyze cross-platform digital footprints to uncover real-world identities, physical locations, and potential criminal charges.

Technical Data Requested in Court Subpoenas

The table below outlines the exact information Take-Two Interactive is legally forcing tech companies to hand over to trace the leakers:

Target Platform	Requested Data & User Account Records	Legal Purpose
Discord Inc.	Full server chat logs, account IDs, phone numbers, registration & login IP addresses for specific leak servers.	Identify individuals sharing stolen gameplay files inside private chat channels.
Microsoft Corp.	Associated Xbox profile records, connected Microsoft OneDrive storage files, and device identifiers (MachineGuid).	Track down cloud accounts where raw video files were originally stored.
GitHub	User repositories hosting code snippets, map asset summaries, and links to leaked media.	Remove copyright-infringing content and uncover developer account links.

Impact on Regular Gamers and Online Communities

While Rockstar's main goal is to catch the hacker group, the court subpoenas are broad enough to affect everyday internet users. The legal filings request user information from entire Discord chat servers where the leaks were reposted or discussed.

This means thousands of innocent gamers who simply joined public Discord servers to read news updates could potentially have their basic profile information scanned as part of the legal sweep. Popular gaming content creators have already confirmed that their community servers were named in the legal documents, forcing creators to clear out threads containing unauthorized media.

Both Microsoft and Discord have stated that they regularly follow legal court orders and are reviewing the documents to comply with intellectual property protection laws.

What Comes Next for GTA 6?

Despite the legal disruptions, official production and launch plans for Grand Theft Auto VI remain on track for its scheduled release date. Security experts advise fans to stay away from unverified download links, free demo offers, or online crypto promotions claiming to offer early game access, as many of these links carry harmful computer viruses.

As the court-ordered deadlines approach, federal law enforcement and corporate investigators continue to trace the digital footsteps of Cyberleek to ensure creative works remain protected.