Take-Two Interactive filed two related DMCA subpoenas in the Southern District of New York on August 20, 2026. One targets Microsoft. The other targets Discord. Both aim to identify the person or people behind the recent wave of Grand Theft Auto 6 gameplay videos posted under the CyberLeek name.
The filings are public. Case numbers are 1:26-mc-00421 (Microsoft) and 1:26-mc-00422 (Discord). They were submitted by attorneys from Kirkland & Ellis on behalf of Take-Two. The legal basis is Section 512(h) of the Digital Millennium Copyright Act, the standard tool copyright owners use to force online service providers to hand over subscriber information when copyrighted material is posted.
The documents state that the material at issue includes "audiovisual content, artwork, images, dialogue, or other creative elements" belonging to Grand Theft Auto VI. Take-Two submitted a sworn declaration confirming the sole purpose of the subpoenas is to identify the alleged infringers so the company can protect its rights. The information is not to be used for any other purpose.
For Microsoft, the request covers all internal business records and investigative records related to the "cyberleek" persona. It specifically seeks data sufficient to identify the user or users behind that name. It also asks for account details, registration emails, IP addresses, phone numbers, linked services (Google, Xbox, etc.), device identifiers, and any Grand Theft Auto, Rockstar, or CyberLeek content stored in associated OneDrive accounts. A GitHub repository previously used to host or link the material is referenced as one of the points of origin.
For Discord, the subpoena lists specific handles: CYBERLEEK, CINEMATICROCKSTAR, Surfer24k (and replacement handles cyberleek_west and surwest), plus servers including the Odyssey guild and the DarkViperAU editors server. It asks for identifying information on every user account that was a member of those communities between June 1, 2026, and the present, along with any device or telemetry records where certain file artifacts were present. Both companies have until approximately September 4 to respond.
That is the actual scope. The filings do not accuse any named public creator of leaking the build. They request records from servers where discussion or distribution of the material may have occurred. DarkViperAU (Matthew Judge) was named because one of the listed invite links is associated with his community. He has publicly stated he knows nothing about the source of the leaks, that the server in question is not his editors Discord, and that no leak clips were shared in his communities.
Is this being blown out of proportion?
In one sense, yes. DMCA subpoenas of this type are routine whenever significant unreleased material from a major title hits the open internet. Publishers file them against platforms every time a build, trailer, or substantial asset dump appears. The language is broad by design because the goal is identification, not immediate prosecution.
Naming a popular creator’s server generates headlines and secondary drama, but it does not equal an accusation that the creator stole or distributed the files. The inclusion of public discussion spaces is common when investigators are casting a wide net for anyone who may have interacted with the original poster.
The coverage cycle has also amplified the story. Every new CyberLeek clip, every creator reaction, and every court filing update becomes its own news item. That creates the impression of an escalating crisis even when the legal steps themselves are predictable.
Is it a really big deal?
Also yes, for different reasons. The volume and nature of the leaked footage suggest someone obtained access to a working development build rather than a short marketing clip or a single trailer. Multiple distinct sequences have appeared over several days, covering open-world movement, vehicle handling, combat, and other systems. That level of access is more serious than a typical trailer leak. It raises legitimate questions about internal security, the number of people who had the build, and how the material left Rockstar’s environment.
GTA 6 is one of the highest-value entertainment properties in development. Take-Two has every incentive to treat the source of a development build as a priority. Previous Rockstar leaks, including the 2022 footage, led to internal investigations and public statements. The current subpoenas are the visible part of a larger effort that almost certainly includes internal audits and cooperation with law enforcement if the evidence supports it.
The September deadline matters. Once Microsoft and Discord produce records, Take-Two will have IP addresses, account links, and device data that can be used to narrow the list of suspects. Whether that leads to a civil lawsuit, a criminal referral, or simply the quiet removal of the source remains to be seen. The fact that new clips have continued to appear while the legal process is underway shows the leaker is either unconcerned or still has material left to release.
In short, the subpoenas themselves are a standard, proportionate response to the theft and distribution of unreleased copyrighted material from a major title. The drama around secondary names and server lists is partly the inevitable result of public court filings in a high-interest story. The underlying problem (apparent access to a development build and the ongoing release of new footage) is more significant than a routine DMCA request. Both things can be true at once.