Confirmed

Take-Two expands GTA VI leak investigation with another Discord request

The Discord docket records a second DMCA subpoena request filed on August 28. Take-Two says it identified another user and seeks to keep part of the information under seal while the investigation continues.

Leonida HUB Editorial5 min read646 reads
Official GTA VI logo beside DMCA docket cards for Microsoft, Discord, Google, and X in an editorial composition
Rockstar Games (GTA VI logo); editorial composition by Leonida HUB

Read this story in Español

Public records from the Southern District of New York show that Take-Two Interactive opened four separate proceedings seeking DMCA subpoenas directed at Microsoft, Discord, Google, and X. The stated aim is to obtain records that may identify accounts connected to the distribution of Grand Theft Auto VI material claimed under copyright.

Confirmed, update August 31, 2026: the Discord docket records a second DMCA subpoena request filed on August 28. Take-Two says its investigation remains ongoing and that it now seeks more targeted information about two users and certain servers. The public docket does not yet show an order authorizing this second request.

What changed

In matter 1:26-mc-00422, Take-Two filed a request on August 28 asking the clerk to issue another subpoena directed at Discord. The public docket lists a redacted version of the request, a proposed order, a supporting declaration, and a motion to keep the investigation’s detailed attachment under seal. The filing describes this as Take-Two’s second request to Discord.

The request says the company identified one additional Discord user, obtained more identifying information for a previously identified user, and gathered additional information about the community servers named in the earlier request. Take-Two says the new request seeks more targeted information and that disclosure of the attachment could tip off the alleged infringers or compromise evidence. We do not reproduce usernames, personal identifiers, or links to the claimed material.

The procedural status matters: this is a request for issuance, not proof that the second subpoena has already been issued, served on Discord, or answered. The public docket reviewed here ends with the filings entered on August 28 and does not show a later order on this second request.

Four proceedings, not one request

Take-Two filed matters 1:26-mc-00421 and 1:26-mc-00422 on August 20, 2026, directed at Microsoft and Discord respectively. On August 21 it opened two more: 1:26-mc-00425, directed at Google, including YouTube, and 1:26-mc-00426, directed at X.

What the court has ordered

On August 21, two judges directed the clerk to issue the subpoenas sought for Microsoft and Discord. The X docket records an issuance order dated August 24. In the Google matter, Take-Two filed a response on August 28 withdrawing the request because it no longer needed the particular information sought; it also reserved the option to file a new request if the investigation requires it. The docket shows a new entry on August 31, although the full text of that entry is not available in the public copy reviewed here.

TorrentFreak and Vandal report the withdrawal of the Google/YouTube request and place the new Discord request within an investigation that Take-Two describes as rapidly evolving. That is the company’s position in its filings, not a judicial identification of the people involved.

Four stages should not be conflated: requesting a subpoena, a court directing that it be issued, the provider being served, and the provider producing or challenging the requested records. The dockets do not show that Take-Two has already received information identifying an individual.

What is confirmed and what remains open

The records confirm a documented legal response by Take-Two and its use of the DMCA subpoena process. They do not yet establish:

  • the actor’s identity or whether more than one person is involved;
  • how the material was obtained;
  • whether there is continuing access to a playable build;
  • that every circulated file or interpretation is authentic;
  • that inferred systems, maps, or mechanics reflect the final game.

Background, August 26: Rockstar publicly acknowledged that GTA VI gameplay videos leaked. The statement does not mention Cyberleek, identify the person responsible, or validate every claim attached to the campaign.

The cryptocurrency angle remains separate

GameSpot and PC Gamer report that posts attributed to Cyberleek promoted a memecoin and later offered advertising placements paid through Monero. GameSpot described extreme price swings and concentrated token holdings; PC Gamer reported a 400 XMR fee simply to initiate commercial contact, estimated by the outlet at roughly $165,000 at the time.

Those figures come from press reporting and can change with the market. The court records do not establish who controls the token, wallets, or any proceeds. Leonida HUB does not link the asset, payment pages, or channels controlled by the actor. This angle remains documented in the Confirmed vs Rumour master thread.

What happens next

The next verifiable milestones are any order on the second Discord request, effective service on each provider, responses or challenges, and further public filings. If the proceedings produce an identification, Leonida HUB will report the relevant facts without turning non-essential personal data into editorial content.

Sources

Primary sources: the Discord docket and Google/YouTube docket. Context and cross-checking: TorrentFreak and Vandal.

Last checked: August 31, 2026.

Sources S.D.N.Y. docket via CourtListener: Microsoft 1:26-mc-00421·S.D.N.Y. docket via CourtListener: Discord 1:26-mc-00422·S.D.N.Y. docket via CourtListener: Google/YouTube 1:26-mc-00425·S.D.N.Y. docket via CourtListener: X 1:26-mc-00426·Rockstar Games: official statement on the leaked videos·TorrentFreak: new Discord request and withdrawn Google request·Vandal: Take-Two investigation update·GameSpot: GTA VI leak timeline·GameSpot: reporting on the leak-linked memecoin·PC Gamer: advertising and Monero reporting. Consulted between August 25 and August 31, 2026.