Rockstar Answers A Leak With Four Subpoenas

Rockstar Games and its parent company Take-Two Interactive filed a wave of DMCA subpoenas after a group calling itself Cyberleek leaked a playable build of Grand Theft Auto VI. The leak surfaced around August 18, 2026, and came with a manifesto criticizing pre-orders, day-one downloadable content, and the industry's move away from physical discs, alongside reported threats directed at other publishers.

Court filings in the US District Court for the Southern District of New York, first reported by Game Developer and corroborated by Kotaku and TorrentFreak, initially named Microsoft and Discord as subpoena targets. Take-Two later expanded the request to X, formerly known as Twitter, and to YouTube, bringing the total to four platform companies ordered to respond.

A Subpoena That Skips The Lawsuit

Section 512(h) of the Digital Millennium Copyright Act lets a copyright holder obtain a subpoena directly from a court clerk, without first filing a copyright infringement lawsuit against the platform or the poster. The mechanism exists specifically to unmask an anonymous account holder so a rights owner can identify who to pursue next.

Take-Two is using it broadly: the Microsoft filing seeks internal investigative records tied to the Cyberleek persona, including details on a GitHub repository and any linked OneDrive accounts, while the X filing names three handles, cyberleek_ar_io, cyberleekario and MrCyberLeek, and asks for account IDs, registration emails, IP access logs, phone numbers, and device identifiers going back to June 1. All four subpoenas carry the same compliance deadline: September 4, 2026.

A Manifesto Written For A Global Audience

Cyberleek's manifesto criticizes publisher practices that frustrate players well beyond the United States, naming pre-orders, day-one DLC, and the retreat from physical discs as evidence of an industry treating buyers as a captive market rather than customers. Those complaints read as generic industry grievances, not as anything unique to how games are sold in North America.

European and UK players buy pre-order editions and day-one DLC under the same terms, and the criticism applies to them just as directly. Take-Two's legal response, however, does not engage with the manifesto's global complaint at all; it answers a narrower question of which companies hold records that a US court can compel them to produce.

Four Platforms, One Records Request

Rockstar's subpoenas target four platform companies, each holding a different slice of the anonymous poster's digital footprint. Lining up what each filing actually asks for shows how the request was built.

PlatformRecords SoughtNamed Accounts/Assets
MicrosoftInternal investigative records on the Cyberleek personaA GitHub repository and linked OneDrive accounts
DiscordAccount and server records tied to the leak's spreadServers linked to the leak, including one belonging to an uninvolved creator
X (Twitter)Account ID, registration email, IP logs, phone number, device identifierscyberleek_ar_io, cyberleekario, MrCyberLeek
YouTubePersonal records to identify the uploaderOne video and three channels: CyberLeeks, Surfer24k, Cyberleek_ar_io

Every company on that list is incorporated in the United States, which is precisely why a single SDNY court order can reach all four of them at once. A platform incorporated outside US jurisdiction would not answer to the same subpoena, no matter what records it held.

Why Platform Jurisdiction, Not Leak Content, Decides Enforcement

The subpoena mechanism reaches Microsoft, Discord, X and YouTube because all four companies are incorporated in the United States and answer to a US court, not because of anything unique about the leaked content itself. This is not a dispute over whether the leak is genuine. It is a demonstration of which legal levers work against an anonymous account, and which do not.

A leaker who posted through an EU-hosted forum, or through a platform incorporated outside US jurisdiction, would not be reachable through a 512(h) subpoena at all, regardless of how similar the leak looked. For EU and UK readers, the lesson travels well beyond gaming: which country a platform is incorporated in decides whether a rights holder, a regulator, or anyone else can compel it to identify you, long before the content in question ever gets weighed.