The leaks have been relentless. Someone operating under the persona CYBERLEEK has spent the past week dumping footage and details from what appears to be an early internal build of Grand Theft Auto 6, covering everything from the map and honor system to melee combat and hypercar footage. Now Take-Two Interactive is done watching. The company has gone to federal court.
How Take-Two is building its case
Take-Two filed subpoenas against both Microsoft and Discord through the Southern District Court of New York. The legal documents request that both companies hand over all internal records and investigative materials that could help identify the person or people behind the leaks. The scope is broad: the subpoenas cover audiovisual material, artwork, images, dialogue, and other creative content that has surfaced without authorization.
Microsoft's subpoena specifically targets records tied to the CYBERLEEK persona, asking the company to share anything from its own internal investigation into that account. The request asks Microsoft to identify "the user(s), person(s) and/or entity/ies associated with that persona."
Both companies have been given a deadline of September 4 to comply.
What exactly Take-Two is asking Discord to hand over
The Discord subpoena is more detailed. Take-Two wants account records for anyone who was a member of several specific servers, including those connected to the handles CYBERLEEK, CINEMATICROCKSTAR, and Surfer24k (along with replacement handles cyberleek_west and surwest). The subpoena also names two additional servers: Ødyssey.gg and the DarkViperAU editors' server.
For each returned account, Take-Two is requesting the account ID, registration email, registration and last-login IP addresses, phone number, linked connections such as Google or Xbox accounts, associated device identifiers, and any content related to GTA, Rockstar, or CYBERLEEK stored in connected OneDrive accounts.
That last part is notable. Pulling OneDrive data means Take-Two is not just looking for chat logs. The company wants to know whether any of these accounts had build files or development assets on their machines.
The DarkViperAU connection draws attention
The inclusion of the DarkViperAU editors' server in the subpoena has raised eyebrows. DarkViperAU is a well-known GTA content creator, and the server being named does not necessarily imply any wrongdoing on his part. It suggests Take-Two believes leaked material may have been discussed or distributed through that server at some point, possibly without the server owner's knowledge.
This is how these investigations tend to work. You trace the content backward through every platform it touched.
The financial pressure behind the legal push
Take-Two's urgency here makes sense when you consider the scale of what has already leaked. The company reportedly lost around $2 billion in market value in the days following the initial leaks. That number puts the legal costs of a federal subpoena campaign in sharp perspective.
The leaker has also shown no signs of stopping. After a brief 24-hour pause, CYBERLEEK returned with new hypercar footage, signaling that the drip of content from the alleged early build is ongoing. Take-Two needs to stop the leak before more of the game surfaces publicly ahead of launch.
For players who want to stay across everything confirmed about the game so far, the GTA 6 pre-order guide covers what is officially known about platforms, dates, and how to secure a copy.
