Take-Two Is Subpoenaing Platforms for GTA 6 Leaks — And It Keeps Getting Worse

The subpoenas didn’t slow anyone down.

Two days after a federal judge granted Take-Two’s DMCA subpoena to Microsoft, the person or group calling themselves CyberLeek released two more GTA 6 gameplay videos on August 22. One showed supercar driving and an armed robbery. The other featured strip club gameplay — and, perhaps deliberately, a cutscene snippet where a character says they need to take “a leak.”

This is not paranoia. This is the seventh and eighth wave of GTA 6 leak footage this week, and it is flowing despite one of the most aggressive legal moves yet from a publisher hunting a leaker. Take-Two’s subpoenas target Microsoft and Discord, seeking the identity behind accounts that posted the videos and, in Microsoft’s case, all internal records related to its investigation of the CyberLeek persona. Xbox CTO Scott Van Vliet publicly confirmed the company is “working closely with Take-Two and Rockstar Games to support efforts to protect creative works and intellectual property.”

The leaks did not pause. If anything, the legal pressure appears to have energized the operation, with subsequent releases growing more provocative in tone and content.

What Take-Two is really after.

DMCA subpoenas are not new in game piracy enforcement. But targeting a platform’s internal investigation records — rather than just account metadata — is broader than usual. Take-Two wants more than a username and an IP address. It wants to know how Microsoft investigated CyberLeek internally, and by extension, how that investigation may have already compromised whatever access the leaker had to the game build.

The subpoena was granted by the United States District Court for the Southern District of New York on August 21. Discord told Variety it complies with valid subpoenas as a matter of routine. Neither Rockstar nor Take-Two issued public statements, which is notable given the scale of the operation. Bloomberg reports Rockstar still does not know how the leaks happened or who is responsible — meaning the legal machinery is moving without the studio having any idea where the breach originated.

This silence is strategic. Any public admission from Rockstar about the scope of the breach would provide the leaker with additional ammunition and potentially reveal investigative blind spots. But it also means the industry is watching to see whether Take-Two’s platform-subpoena model becomes precedent for how AAA publishers handle breaches in the future.

The crypto angle is the real story.

Every video from CyberLeek includes an advertisement for a memecoin. This is not incidental branding. Industry observers widely consider the CyberLeek operation a crypto scheme — the leaker trades in leaked content and converts attention into token value. That changes the calculus entirely. A leaker motivated purely by notoriety can be deterred by legal risk. A leaker incentivized by token price movement has a different risk profile. Each new video is not just a leak; it is marketing.

The memecoin mechanism creates a feedback loop: more leaks drive token demand, higher token valuations fund better hardware and operational security, and operational security enables further leaks. Traditional anti-piracy remedies assume a cost-benefit analysis that doesn’t apply here — the leaker’s costs are marginal while their upside is potentially unlimited.

The cutscene taunt — the character saying they need to take “a leak” — reads like someone who knows they are being watched and is enjoying the friction. It is a performance, and performances like this thrive on visibility, not silence. Legal pressure from publishers only validates the narrative the leaker is selling: that they have access the publisher cannot control.

Platforms are now the frontline.

Take-Two’s strategy signals where the industry thinks the battle will be fought: not against individual pirates but against the platforms that host communities where leaks originate and spread. GitHub received a takedown notice on August 19. Discord and Microsoft are now facing subpoenas. The pattern is clear — Take-Two is treating every platform in the distribution chain as a potential evidence holder.

This matters for gaming culture beyond GTA 6. Discord is the de facto community hub for major game launches. Content creators like Australian GTA YouTuber Matthew Judge — known as DarkViperAU — operate from these servers. Judge has denied any wrongdoing, but his name appears in the subpoena scope. When publishers start compelling platforms to hand over member lists and internal investigation files, the normal function of gaming communities becomes entangled with legal discovery.

The chilling effect is already visible. Multiple gaming Discord servers have reported increased encryption usage, self-destructing message features, and moves to private servers. Communities that existed primarily to share strategies and build anticipation are now operating with the assumption that any participation could become evidence in a legal proceeding. This shifts the center of gravity away from open community engagement toward encrypted, anonymous channels — the very environments where leaks are easiest to distribute and hardest to trace.

The timing is cruel — and calculated.

GTA 6 releases November 19, 2026. The leaks are accumulating in the final stretch before one of the biggest cultural moments in gaming. Netflix is pushing forward with its exclusive reveal event on August 27, titled Grand Theft Auto 6: An Extended Look, which will stream for six hours before moving to other platforms. Bloomberg reports frustration and anger internally at Rockstar, but also that there are no plans to delay the Netflix event.

That event is now occurring inside a leak environment that shows no signs of shrinking. Every piece of gameplay that escapes reduces the exclusivity of the marketing moment. The six-hour Netflix special was designed to give fans their first deep dive into the game — but when seven-eight waves of gameplay have already circulated globally, the reveal loses its power to surprise. Marketing spend that relied on controlled disclosure is now leaking into the public domain faster than it can be replaced.

Bloomberg notes that internal frustration at Rockstar has reached levels not seen since the delayed 2018 trailer incident — when a single leaked image forced the studio to pull an entire marketing campaign. The difference now is that the leaks are sustained and professional, not a one-time breach. There is no single image to withdraw from circulation.

What happens next.

The CyberLeek operation will likely continue until something changes the incentive structure — whether that is an arrest, a successful takedown of the memecoin infrastructure, or the game shipping. Take-Two’s subpoena strategy is a signal that it will pursue legal action aggressively, but subpoenas are investigative tools, not enforcement outcomes. They reveal identities; they do not stop distributed content.

Several scenarios are plausible. If Take-Two identifies and arrests the leaker, the operation could collapse — unless it is part of a distributed network, which is increasingly common in modern leak ecosystems. If the memecoin infrastructure is severed through regulatory action or exchange delistings, the financial incentive evaporates. If the game ships on November 19, the leaks lose their scarcity value overnight.

But there is a fourth outcome that deserves attention: the subpoenas fail to produce results, and Take-Two is forced to accept that its current toolkit is inadequate for professional, financially-motivated leak operations. In that case, the industry will need to develop new models — perhaps involving hardware-level DRM, supply chain monitoring, or partnerships with blockchain analytics firms to trace memecoin flows back to real-world actors.

What this saga makes plain is that the industry’s current toolkit for handling leaks — DMCA takedowns, platform pressure, legal threats — is designed for a world where leaks are accidental or amateur. CyberLeek is professional, persistent, and financially motivated. The subpoenas to Microsoft and Discord are a necessary step. They are not a solution. And until the incentive structure changes, the videos will keep coming.