The ongoing GTA 6 leak saga has moved into the courtroom, with Take-Two Interactive seeking information from Microsoft and Discord that could help identify the person operating under the name CyberLeek.
Take-Two, the parent company of Rockstar Games, filed subpoenas in the Southern District of New York on Friday, August 21. The company is seeking records connected to the accounts and online activity associated with the alleged leaker.
The legal action follows a fresh wave of material attributed to CyberLeek, including a video intended to demonstrate access to a playable build of Grand Theft Auto 6.
Take-Two seeks identity and account records
The subpoenas were filed under the Digital Millennium Copyright Act, or DMCA. According to the filings, Take-Two says it is seeking information needed to identify the person or people responsible for distributing copyrighted GTA 6 material.
The company is not primarily asking the court for damages at this stage. Instead, the requests focus on obtaining information that could reveal the identity behind the CyberLeek alias.
Microsoft has reportedly been given until September 4 to provide records related to the investigation. The requested information includes data associated with accounts and activity connected to the CyberLeek identity.
Take-Two has also requested information concerning specific Discord accounts and servers. The records sought may include account identification details, registration email addresses, IP addresses, phone numbers, connected services and device information.
The company is also seeking potentially relevant GTA 6, Rockstar Games and CyberLeek material stored in associated OneDrive accounts. That request could give Take-Two access to information about files that have not yet appeared publicly.
Discord accounts are also under scrutiny
Discord has received a similar request covering a list of accounts, usernames and servers allegedly connected to the leak operation.
Names mentioned in the request include CYBERLEEK, CINEMATICROCKSTAR and Surfer24k, along with variations of those names. Take-Two is also seeking information related to the Ødyssey.gg server and a server associated with GTA content creator DarkViperAU.
The requests indicate that Take-Two is attempting to reconstruct the network surrounding the leaks rather than focusing solely on the account directly publishing the material.
Neither Take-Two nor Rockstar Games had publicly commented on the legal filings at the time of reporting. Until now, the companies’ most visible response to the latest leaks had largely involved efforts to remove copyrighted material from websites and social media platforms.
Cryptocurrency activity could provide another lead
The investigation has also expanded beyond gaming platforms.
CyberLeek has promoted a cryptocurrency token associated with the leak campaign and has suggested that additional material could be released as the token gains attention.
That activity has attracted the attention of members of the GTA community, with one investigator reportedly tracing the funding behind the $CYBERLEEK token.
According to the investigation, a GTAForums user known as Vice Cit linked funding associated with the token to KuCoin, a cryptocurrency exchange based in the Seychelles. Because cryptocurrency exchanges can maintain customer identification records under know-your-customer requirements, the trail could potentially provide another route for identifying whoever controls the operation.
The findings also suggest that the person or group behind the project may have spent approximately $29,000 on the token and the website used to distribute the leaked material. The reported investment was allegedly recovered on the first day through activity surrounding the project.
More recent estimates cited by the investigation put trading volume at roughly $2.1 million per day, with fees potentially generating tens of thousands of dollars in revenue. Those figures have not been independently confirmed by Take-Two or Rockstar.
If accurate, the cryptocurrency activity would add a significant financial dimension to an operation that has publicly been presented as an activist campaign.
Leak investigation reaches financial markets
The latest developments come as Take-Two prepares for the release of GTA 6, one of the most closely watched game launches in the industry.
The leak controversy has also been followed by market volatility. Take-Two’s market capitalization reportedly fell by around $2.83 billion following the initial release of material claiming to show a playable version of the game.
The company’s shares dropped from about $248.13 to $231.60 before recovering some of the decline.
While it is difficult to attribute a stock movement entirely to leaked footage, the reaction highlights the enormous commercial expectations surrounding Rockstar’s next major release.
Legal pressure is increasing as GTA 6 approaches launch
Take-Two’s decision to seek information directly from Microsoft and Discord represents a significant escalation in its response to the latest leaks.
The company is now pursuing not only the identity of the individual behind CyberLeek but also account information, cloud-stored files and connections between multiple online identities and communities.
The September 4 deadline could therefore become an important point in the investigation. Information supplied by Microsoft and Discord may provide new leads for Take-Two as it attempts to determine who is responsible for distributing the material.
The CyberLeek investigation is also only one part of a broader leak problem surrounding GTA 6. Another group has reportedly begun distributing portions of the game’s source code, adding another potentially serious threat to Rockstar’s efforts to protect the project before its release.
