Take-Two Is Asking Microsoft to Hand Over Its Own Leak Investigation

Drama

25 August 2026 01:54

Microsoft ran its own investigation and probably found the GTA 6 leaker.

Microsoft's petition highlights "all internal Microsoft business records and investigative records associated with Microsoft's internal investigation of the 'cyberleek' persona sufficient to identify the user(s), person(s) and/or entity/ies associated with that persona."

Microsoft ran its own investigation and naturally Take-Two wants the file.

Of course this only makes sense if Take-Two believes Microsoft found something. The petition also cites a GitHub repository which is Microsoft-owned, where infringing material was posted, which is one plausible reason Microsoft would have been looking in the first place.

Xbox CTO Scott Van Vliet confirmed the cooperation "We are working closely with Take-Two and Rockstar Games to support efforts to protect creative works and intellectual property." Microsoft isn't contesting any of it.

What's being demanded

Take Two is asking from Discord, for every account that communicated in three named servers since 1 June:

Account ID and registration email
Registration and last-login IP addresses
Phone number
Linked connections including Google and Xbox
Device identifiers, specifically MachineGuid and MSA
OneDrive content relating to GTA, Rockstar or CyberLeek

The filing goes after names such as CYBERLEEK, CINEMATICROCKSTAR and Surfer24k, plus replacement accounts the leaker reportedly moved to after the originals were flagged.

Take-Two's is on a warpath and ready "to obtain the identity of an alleged infringer or infringers, and that such information will only be used for the purpose of protecting Take Two's rights."

The bystander problem

Discord IDs encode their creation timestamps, and people have been decoding these.

Apparently one of the named servers belongs to Australian GTA 5 streamer Matthew "DarkViperAU" Judge, described in the documents as an editors' server. Judge repeatedly said he doesn't know anything related to this, that the server named isn't actually his, and that his best guess is CyberLeek lurked in his Discord after he repeatedly said on stream that the leaker can't drive.

The request covers everyone in those servers since 1 June, not just suspects, and it reaches into device identifiers and cloud storage. Anyone who happened to be in the room at that time.

Where it goes

DMCA subpoenas let rights holders compel identifying data without filing a full lawsuit first, which is exactly why this moved faster than the 2022 breach did. That case ended in law enforcement involvement and a conviction.

If Microsoft and Discord comply by 4 September, which looks like they will, civil suits or criminal referrals become possible. Currently Take Two most likely does not have a target.

Discord's position on the matter "We review and comply with valid subpoenas when we receive them, as is standard and routine for companies like ours."

CyberLeek responded to the court by posting two more clips. Rockstar still hasn't commented publicly, and the Extended Look premieres on Netflix on 27 August.

More:Every Time Zone for the GTA 6 Extended Look on 27 August

Tags: Take-Two GTA VI

Share: