Take-Two Interactive has reportedly gone legal on the person behind the latest Grand Theft Auto VI leaks.
The Rockstar parent company is said to have issued subpoenas to Microsoft and Discord, hunting for records that could connect an online alias called “Cyberleek” to a real, identifiable person.
The alleged leaker is accused of pushing unauthorized GTA 6 material online, then using the hype to promote a cryptocurrency token.
According to the subpoenas, Take-Two is asking for identifying details tied to certain Discord servers and accounts, including:
- Discord account IDs
- Registration emails and IP addresses
- Most recent login IPs
- Phone numbers linked to accounts
- Connected accounts such as Google or Xbox
- Device identifiers, including Microsoft account or machine IDs
- OneDrive content related to Grand Theft Auto, Rockstar, or Cyberleek
The excerpt reportedly covers a set time window, but the full document hasn’t been made public. It’s unclear which servers are named, whether message content is included, or whether the requests were split differently between the two companies.
Microsoft is an obvious target because it owns a lot of the internet. Microsoft accounts, OneDrive, Xbox logins, and Windows device records all sit under its roof. So does GitHub, where outside researchers reportedly published an open-source investigation trying to link the Cyberleek alias to accounts and crypto wallets.
That research isn’t an official identification. Nobody has confirmed its conclusions.
Discord matters for the obvious reason: it’s where leak communities live. There are also conflicting claims about which accounts actually belong to Cyberleek, with several reportedly exposed as impersonators.
Neither company is obligated to hand over everything on the list. Platforms routinely object, negotiate a narrower scope, or ask a court to quash requests they see as too broad. There’s no confirmation that either has produced a single record.
The meme coin problem
The leaked material described so far is limited gameplay footage from a small slice of the map. The louder claim is that the leaker holds a playable development build. That would be a different level of problem entirely, potentially exposing missions, assets, engine details, and online systems ahead of launch. It’s unverified.
The crypto angle is what likely raised the temperature. The alleged leaker is said to have promoted a meme coin alongside the leaks, with unconfirmed figures around $50,000 in fees floating around. No wallet analysis or financial record has been published to back that up, and no regulator has called the token anything.
Making money off stolen material, if proven, would feed straight into a damages claim.
Rockstar has been here before. In September 2022, dozens of early GTA 6 development videos hit the internet after an unauthorized intrusion the company confirmed. A British teenager was later found responsible in a case tied to the Lapsus$ group. In December 2023, a low-quality copy of the first official trailer leaked, forcing Rockstar to drop the real thing early.
As it stands, nobody has been arrested, charged, or publicly named. Take-Two is still at the stage of trying to turn a username into a person.
