Take-Two Interactive has begun legal action to identify the person, or people, behind the “Cyberleek” name connected to recent Grand Theft Auto 6 leaks. The company has secured subpoenas seeking information from Microsoft and Discord—not X or Google directly.
The legal requests could give Take-Two access to account details such as email addresses, IP addresses, phone numbers, linked accounts, device information, and records connected to the alleged GTA 6 leaks. Microsoft and Discord reportedly have until September 4, 2026, to respond.
Take-Two Is Looking for the GTA 6 Leaker
Take-Two is the parent company of Rockstar Games, the studio behind Grand Theft Auto 6. In August 2026, a person or group using the Cyberleek name began taking credit for sharing alleged GTA 6 gameplay footage and other materials online.
Leaks are a major concern for game publishers. They can reveal unfinished content, spoil story details, confuse players, and spread material that was never meant to be public. In this case, Take-Two has turned to the courts to find out who may be responsible.
Reports say Take-Two filed DMCA subpoena requests in the U.S. District Court for the Southern District of New York on August 20. A DMCA subpoena is a legal tool that can require an online service to provide identifying information about someone suspected of copyright infringement.
Which Companies Did Take-Two Subpoena?
The confirmed targets are Microsoft and Discord.
| Company | Why Take-Two wants information | Possible records requested |
|---|---|---|
| Microsoft | To investigate accounts and services possibly connected to Cyberleek or leaked GTA 6 content | Account IDs, emails, IP addresses, phone numbers, device data, OneDrive records, linked Xbox and Google accounts |
| Discord | To identify users who may have shared or discussed alleged leaked material in named servers | User account details, registration information, login IP addresses, linked connections, and account-related records |
Microsoft’s subpoena reportedly also asks for business and investigative records tied to Microsoft’s own investigation into the Cyberleek persona. It may also cover GTA, Rockstar, or Cyberleek material stored in connected OneDrive accounts.
The Discord request is broader than a search for one username. It reportedly seeks identifying information for accounts that were members of several Discord servers linked to the alleged leak activity.
Was X or Google Subpoenaed?
At the time of writing, public reporting and court-action coverage confirm subpoenas aimed at Microsoft and Discord. There is no verified public evidence that Take-Two has separately subpoenaed X for the @cyberleek_ar_io account or Google for a YouTube account.
However, this may be the source of the confusion:
- Microsoft’s requested records can include linked Google or Xbox accounts.
- A linked Google account is not the same thing as a legal subpoena sent to Google.
- Online posts can claim an account belongs to a person, but a social-media claim is not proof of the account holder’s identity.
- Even if someone says they do not have an X account, that does not by itself settle whether an account was used by an impersonator, another person, or a separate group.
For now, it is safest to report that Take-Two is pursuing information from Microsoft and Discord
What Information Could Take-Two Receive?
A subpoena does not automatically mean Take-Two will get every piece of data it asks for. Microsoft and Discord may provide records, challenge parts of the request, or limit what they share under applicable law.
Still, the reported requests are detailed. Take-Two is seeking information that could help connect an anonymous online identity to a real person or group, including:
- Account IDs and registration email addresses
- Registration and recent-login IP addresses
- Phone numbers associated with accounts
- Linked services, such as Google or Xbox accounts
- Device identifiers and telemetry information
- OneDrive content related to GTA, Rockstar, or Cyberleek
- Microsoft business records connected to its reported Cyberleek investigation
- Discord account records from users in named servers
An IP address is a number assigned to an internet connection. It may help investigators trace which internet provider or general connection was used, although it does not always prove exactly who was using a device at a particular time.
Related: Xbox Works With Rockstar and Take-Two After GTA 6 Leak Subpoenas
What Happens Next?
The reported deadline for Microsoft and Discord to provide the requested information is September 4, 2026.
After that, Take-Two could use any returned information to continue its investigation. The company may send further takedown requests, pursue more subpoenas, or potentially file a lawsuit if it believes it has identified people responsible for copyright infringement.
That outcome is not guaranteed. A subpoena is an information-gathering step, not a court ruling that Cyberleek committed a crime or that any particular person is legally responsible.
Why This Matters for GTA 6 Fans
The legal action shows how seriously Take-Two is treating the latest GTA 6 leak claims. Rockstar has dealt with major GTA 6 leaks before, and the publisher is now trying to stop the spread of alleged unfinished material while learning who was behind it.
Players should be careful with unverified posts, supposed “insider” screenshots, and videos shared through mirror sites or Discord servers. A clip being widely reposted does not prove it is real, recent, or representative of the final game.
For official GTA 6 news, trailers, release information, and announcements, fans should rely on Rockstar Games and Take-Two’s official channels rather than leak accounts.
Take-Two’s GTA 6 Leak Investigation Explained
Take-Two has not publicly confirmed the real identity of Cyberleek, and the court action does not prove that one person is behind every claimed leak. What is clear is that the company has asked Microsoft and Discord for records that may identify accounts connected to alleged GTA 6 copyright infringement.
The most important correction for readers is simple: the confirmed subpoenas target Microsoft and Discord. Claims about separate subpoenas to X or Google should be treated as unverified unless new court filings or statements are released.
