Take-Two Interactive filed two DMCA subpoenas in the Southern District of New York on August 20, demanding that Microsoft and Discord identify the person or persons behind the "CyberLeek" persona responsible for this week's Grand Theft Auto 6 gameplay leaks. Take-Two wants more than just names and is asking for MachineGuid and MSA device identifiers, registration and last-login IP addresses, phone numbers, linked Google and Xbox connections, and OneDrive contents for every account that communicated in three named Discord servers since June 1. Both subpoenas, filed by Dale Cendali and Joshua Simmons of Kirkland & Ellis, set a September 4 deadline.
- The data center cooling state of play
- The custom AI ASIC state of play
- America’s AI chip rules keep changing — and the rest of the world is paying the price
- GTC 2026: Ian Buck press Q&A transcript — VP of Hyperscale and HPC speaks out on shelving CPX and shipping LPU decode this year
- Demand for data center CPUs has surged, and AI agents are responsible
MachineGuid is a Windows value generated during installation and, according to Microsoft's own support documentation, stable across hardware changes unless the OS drive is replaced. Attachment A asks Microsoft to return that identifier for every account that was a member of, or communicated with any of the three listed Discord servers between June 1, 2026 and the present, in addition to the three handles named in the filings.
The Discord subpoena names three servers: Ødyssey.gg (guild ID 1517326120867991592), "! Odyssey" (1127436882800816149), and DarkViperAU (268280696601051136). The Microsoft subpoena describes the first of those as a cheat community and labels it the "operator's home." It also demands device telemetry where certain "tool/file artifacts" were present on a system, though no list of those artifacts appears anywhere in the exhibit.
Take-Two's petition directs the Microsoft subpoena to the company as GitHub's service provider, not as the operator of Xbox or OneDrive. The predicate takedown notice, filed as an exhibit, was sent on August 19 by Take-Two IP paralegal Alex Aviles to GitHub's copyright address over a single repository, zyrexdz/cyberleek-leak-research. It states that the repository "must be completely disabled, there are no remedies to rectify this clear case of infringement." At the time of writing, the GitHub repo is public with nearly 500 stars, more than 30 forks, and a commit pushed at 16:18 UTC.
Discord account and server IDs encode their creation time, and decoding the IDs in the filings dates the CyberLeek account to January 10, 2019, and the DarkViperAU server to January 10, 2017. Australian creator Matthew "DarkViperAU" Judge, whose server the filings describe as an editors' server, denied any knowledge in a post on X, writing "I don't know anything." The Ødyssey.gg server decodes to June 19, 2026, which is 18 days after the start of the June 1 records window. The Discord petition also lists 1517326120867991592 as a user ID belonging to the handle Surfer24k, while both subpoena attachments list the same number as the Ødyssey.gg server ID.
Take-Two has filed multiple subpoenas seeking info to catch the GTA 6 leaker. They're asking for my discord info, I'm mentioned by name.- I don't know anything. - That isn't my editors discord. - There aren't even any clips of the leaks in either of my Discords. I am… pic.twitter.com/uhhZOlvmf9August 21, 2026
A sixth gameplay video leak appeared on August 21, six days before Grand Theft Auto 6: An Extended Look premieres on Netflix. Rockstar's parent company was itself hacked by ShinyHunters in April, while CyberLeek claims to have a full, working build and has published a manifesto attacking digital-only preorders.
Follow Tom's Hardware on Google News, or add us as a preferred source, to get our latest news, analysis, & reviews in your feeds.
