Take-Two Subpoenas Microsoft and Discord in GTA 6 Leak Case

Take-Two Interactive has escalated its response to the ongoing Grand Theft Auto VI leaks by moving to court and issuing subpoenas to Microsoft and Discord, seeking help identifying the person behind the leaked footage. The company is asking both platforms to provide account and server-related records tied to the suspected leaker, with a deadline of September 4 set by the U.S. District Court for the Southern District of New York.

Why Take-Two is involving Microsoft and Discord

In filings made to the U.S. District Court for the Southern District of New York, Take-Two formally requested that Microsoft and Discord cooperate in efforts to locate “CyberLeek,” the alleged source of mass-distributed GTA VI material. The court issued subpoenas to Microsoft Corporation and Discord, directing them to disclose private information from numerous accounts—spanning services such as OneDrive and Xbox—and to submit whatever evidence they can extract from their systems.

Take-Two’s stated aim is to obtain the identity of the alleged infringer(s) so it can protect its rights. The court materials describe the subpoena as being issued under the DMCA for the purpose of identifying the suspected party, with an emphasis that the information will only be used to safeguard Take-Two’s legal interests.

What the companies are being asked to turn over

The filings also spell out the kind of data Take-Two wants Microsoft to search for and provide. For each account returned, Microsoft is being asked to provide details including:

Account ID
Registration email address
Registration IP address and last login IP address
Phone number
Linked connections (examples cited include Google, X, and Xbox)
Device identifiers associated with the account (including MachineGuid and MSA)
Any content related to Grand Theft Auto, Rockstar, or CyberLeek found in OneDrive

For Discord, Take-Two is pushing the same general approach—using platform records to identify the leaker. The filings indicate that CyberLeek is believed to operate from a dedicated server, alongside running a website domain and an account on X/Twitter, which could help connect online activity to specific accounts and records.

What the leaks have revealed and what Take-Two is trying to stop

Take-Two and Rockstar have faced a sustained wave of confidential GTA VI leaks, including a sixth gameplay leak that has intensified pressure on the companies responsible for the game. The materials describe the current situation as “massive” leak activity, and they claim the suspected leaker has access to a build of the game that is reportedly playable, with demonstrations said to include alternate “looks” for a character named Jason.

While CyberLeek remains unidentified, the filings say the company behind GTA VI has activated the highest possible efforts to find the source of the leak. The leaker’s position is also described: CyberLeek is said to be demanding that Rockstar issue an apology connected to the absence of a disc edition.

The court record also notes suspicions that the controversy may be tied to efforts to promote the leaker’s own cryptocurrency, and it references additional threats from other hackers attempting to ride the situation—such as claims about leaking the ending of Lucia’s story in GTA VI.

Deadline pressure and the bigger pattern for major releases

Microsoft and Discord have until September 4 to provide the documentation requested by the court. The timing matters because Take-Two’s stated goal is to halt further leak-driven disclosure—particularly story and development details that could affect how the game is received when it eventually launches.

Beyond GTA VI specifically, the case highlights a broader trend in high-profile releases: when leaks involve platform accounts, cloud storage, and communication infrastructure, studios may move beyond traditional takedown requests and pursue subpoenas aimed at identity discovery. For players, the practical outcome is straightforward: faster identification efforts can reduce how quickly new confidential footage and assets circulate, even as the leaks continue to surface.