Incident update · August 23, 2026

Take-Two Expands Legal Effort Around Reported GTA VI Leaks

Four federal applications seek identifying records. As of the latest August 23 review, none of the four requested subpoenas had been issued by the clerk and no resulting user data had changed hands.

Published
August 23, 2026
Last reviewed
August 23, 2026
By
Game Defense Editorial
Abstract security perimeter filtering untrusted digital signals

The short version

Take-Two filed DMCA subpoena applications directed at Microsoft and Discord on August 20, followed by applications directed at Google/YouTube and X on August 21. Judges signed orders directing the clerks to act in the Microsoft and Discord matters. According to reporting reviewed August 23, none of the four requested subpoenas had been issued by the clerk and no user data had changed hands as a result.

This remains a copyright-identification process, not a completed attribution or a lawsuit. The filings are not a public finding that every named account participated in obtaining the material, nor proof that an account using the CyberLeek name is the original source.

What Take-Two is seeking

The applications ask service providers for records that could identify alleged infringers. Reporting on the Microsoft and Discord matters describes account and service information relevant to that identification effort. The later Google/YouTube and X applications concern particular accounts or uploads.

Some accounts using CyberLeek-related names may be impersonators or downstream distributors. Inclusion in an application should not be reported as confirmation that Take-Two has identified the original operator.

Variety reported the Microsoft and Discord responses. TorrentFreak documented the later Google/YouTube and X applications and the still-pending clerk-issuance status.

What the filings confirm

The filings confirm that Take-Two is treating identified material as an infringement of copyrights it holds in GTA VI and is pursuing information that may help identify alleged infringers.

That is significant because Rockstar has not issued a separate public statement expressly authenticating every circulated item. Take-Two’s court representations are the strongest formal connection between identified material and GTA VI. They do not authenticate every repost, image, caption, social account, or broader claim attached to the CyberLeek name.

What remains unverified

  • The identity, nationality, age, employer, or location behind CyberLeek
  • Whether CyberLeek is the original source or a distributor
  • How the material was acquired
  • Whether an employee account, development system, or test device was compromised
  • Whether the alias possesses source code or controls the full or final GTA VI build
  • Whether circulated map material is complete or current
  • Whether anybody has been arrested
  • Whether this incident connects to Rockstar’s 2022 breach or another security event

Reported interactive footage supports a narrower conclusion: somebody involved appears to have had access to some playable build or portion when the recording was made. It does not prove possession of the complete game.

Rockstar’s schedule remains unchanged

Rockstar’s official GTA VI page continues to list an Extended Look for August 27 at 3 p.m. ET and a November 19 launch for PlayStation 5 and Xbox Series X|S.

According to Bloomberg, Rockstar had not identified the source or determined how the material was obtained as of August 21, but did not plan to change the presentation.

Why precise wording matters

“Take-Two subpoenaed Microsoft and Discord” compresses several procedural steps into a completed event. The sequence is: an application is filed; a judge may sign an order directing the clerk; the clerk may issue the subpoena; a provider may be served and respond or disclose data; records may or may not support identification; and a separate lawsuit may later be filed.

At this review point, the Microsoft and Discord matters had reached the judicial-order stage, while the Google/YouTube and X matters were verified at the application stage. None of the four requested subpoenas had reached clerk issuance according to the latest reviewed reporting. Filing does not equal issuance; issuance does not equal provider disclosure; disclosure does not equal confirmed attribution; and none of these steps is itself a lawsuit or judgment on the merits.

Responsible response

Do not repost purported footage to illustrate this development. Do not follow token, wallet, download, or impersonation links. Reputable reporting and official records are sufficient to document the legal response without extending the exposure.

Game Defense will update the main CyberLeek incident page when a reliable source establishes a material change.

Sources