Anyone who has been following the GTA 6 leak story over the last week already knows it stopped being a normal internet rumor cycle days ago. What started as a handful of blurry clips turned into a steady drip of gameplay footage, and now it has landed in a federal courtroom. Take-Two Interactive filed two subpoenas on August 20 in the Southern District Court of New York, targeting Microsoft and Discord directly, in an attempt to find out who is behind the leaks. I’ve watched a few of these leak cycles play out over the years, from the 2022 GTA 6 internal build leak to smaller Rockstar Games incidents, and this one feels different because Take-Two is not just sending takedown notices this time. It is going after identities.
This piece breaks down exactly what the subpoenas ask for, who CyberLeek is believed to be, why the crypto angle matters, what the September 4 deadline actually means, and what is likely to happen from here. I’ll flag clearly where something is confirmed by court filings versus where it is still speculation being aggregated from social media threads, because that distinction matters a lot in a story like this.
What Actually Happened This Week
Gameplay clips showing Jason driving through the city, interacting with police, fighting NPCs, and even flying around the game’s world started circulating under the alias CyberLeek. One clip that got a lot of attention showed a hypercar being driven through busy city streets, giving another look at how traffic density and police response work in GTA 6. Another showed the wanted star system in action, which is always going to draw eyes since Rockstar has kept that mechanic close to its chest since the last mainline entry.
None of these clips fully explain the scope of GTA 6’s police mechanics on their own. But because the footage appears to come from an actual development build rather than a polished marketing reel, it generated far more discussion than a typical leak would. Reddit threads, X posts, and gaming forums have been picking apart every frame, comparing lighting, physics, and UI elements against what Rockstar has shown officially in its two trailers.
Who Is CyberLeek? What We Actually Know
The account behind the leaks goes by CyberLeek, not “Cyber Leak” as some early aggregator posts wrote it. According to Kotaku’s original report on the subpoenas, the leaks have circulated from a site containing a manifesto criticizing practices like digital pre-orders and the locking of finished content behind paywalls or disguised as “fake” DLC. That framing has made some people online sympathetic to the leaker, treating this as a consumer protest rather than theft.
But the picture gets more complicated once you look at the financial side. Multiple outlets have independently reported that the same accounts pushing the leaked footage have also been promoting a cryptocurrency meme coin, apparently trying to profit off the attention the leaks generate. GameSpot’s coverage notes that alongside the gameplay, the leaker was also advertising crypto, and there have reportedly been polls asking followers which piece of footage should be released next, with money apparently tied to some of those interactions. That is worth sitting with for a second, because it means this probably is not a simple whistleblower situation. It looks more like someone using leaked content as a monetization engine.
One detail from GameSpot’s report stood out to me: one of the leaked clips reportedly shows the word “LEEK” spelled out in bullet holes on a wall inside the game, which is being read as a signature of sorts from whoever has access to the build. Small detail, but it tells you the person behind this has spent real time inside the actual game files, not just screen recording someone else’s stream.
What the Subpoenas Actually Request
This is the part that got buried under a lot of speculation online, so let’s go through it plainly using what the filings themselves say. Two separate DMCA subpoenas were filed on August 20 in the Southern District Court of New York, one aimed at Microsoft and one aimed at Discord. A third filing reportedly also named GitHub, according to reporting picked up by MSN and originally sourced to Kotaku, since some of the material appears to have been distributed or referenced through GitHub repositories tied to the leaker’s usernames.
The subpoena to Microsoft asks for internal business and investigative records tied to the company’s own look into the CyberLeek persona, including anything connected to accounts, devices, and linked services such as Xbox and OneDrive. The Discord subpoena is broader in scope. It asks for identifying information tied to every user account that was a member of or communicating within specific Discord servers connected to the leak during the relevant period. That includes account IDs, registered email addresses, IP addresses used to log in, phone numbers on file, and any linked accounts such as Xbox Live or Google profiles.
Here is a detail that a lot of the early coverage glossed over. The filings do not simply describe the footage as “leaked” or “unauthorized.” They specifically refer to it as copyrighted material, and as PC Gamer’s writeup points out, Take-Two submitted a sworn declaration confirming that the purpose of the DMCA subpoena is to obtain the identity of an alleged infringer or infringers. Several outlets have read that specific legal language, calling the footage “copyrighted,” as an implicit confirmation from Take-Two that the leaked clips are genuine rather than fabricated, since a company generally would not invoke copyright protection over content it does not believe is real.
The September 4 Deadline, Explained
Both Microsoft and Discord have been given until September 4 to comply with the subpoenas and hand over the requested records. That date has been treated online like it is the day CyberLeek’s identity gets revealed, and I want to be straightforward here: that is not necessarily how this works.
September 4 is simply the deadline for Microsoft and Discord to respond to the legal request, not a public reveal date. Once Take-Two receives the account records, it still has to cross reference that data, potentially subpoena additional services if the trail leads elsewhere, and decide how it wants to proceed legally against whoever gets identified. There is no requirement for that information to become public immediately, or possibly at all, depending on how Take-Two chooses to handle it. A civil case or a criminal referral could take considerably longer to unfold, so readers should treat early September as the start of the next phase rather than the ending point of this story.
Why the Crypto Angle Actually Matters Legally
A lot of leak stories fade out because there’s no financial motive to trace, just someone posting for attention. This one is different because of the meme coin promotion tied to the CyberLeek account. If investigators or Take-Two’s legal team can connect wallet addresses, exchange accounts, or payment processors used in that crypto promotion to the same devices or IP addresses used to access Discord or share files through Microsoft-linked services, that gives them a much stronger identification trail than IP logs alone.
Crypto transactions are pseudonymous, not anonymous. Wallets can often be traced back to exchange accounts that required identity verification at some point, and if the same device or network was used for both the leak activity and the crypto promotion, that overlap becomes a meaningful piece of evidence. This is one of the more underreported angles of the story so far, and it is worth watching closely as the case develops.
How Rockstar and Take-Two Have Responded So Far
Neither Rockstar nor Take-Two has publicly confirmed that the leaked footage is authentic, and neither company has issued a detailed public statement about the leaks themselves. That silence has been a talking point in itself. Some fans speculated Rockstar already knew who was behind the account, especially after CyberLeek appeared to go quiet for a stretch following one of the earlier uploads, only for another clip to surface and break that theory.
Instead of a public statement, Take-Two chose the legal route, going straight to the platforms that host or connect the accounts involved. That is a meaningful shift in strategy. It suggests the company is less interested in a public relations response and more focused on gathering usable evidence before deciding on next steps. Windows Central’s report also noted the leaks have coincided with a roughly 2% dip in Take-Two’s share price over the past week, though the stock reportedly remains up for the year overall, which gives some sense of how seriously the market is treating the disruption.
Timing Could Not Be Worse for Rockstar’s Marketing Plan
GTA 6 is scheduled to launch in November, which means Rockstar is deep into what should be the most controlled stretch of its marketing calendar. Multiple outlets reported that the leaks broke roughly a week before Netflix was set to air an exclusive extended look at the game, a promotional moment Rockstar had presumably built up specifically to control the narrative around new footage. Instead, that plan has been largely overshadowed by unauthorized clips spreading across X, Reddit, and file sharing sites faster than any official reveal could compete with.
Rockstar has always guarded pre release information tightly, arguably more than any other major studio. Seeing this volume of unauthorized gameplay reach the public before an official showcase is a genuinely unusual situation for the company, and it partly explains why Take-Two moved to litigation rather than waiting things out.
Should You Trust What’s in the Leaked Footage?
This is worth addressing directly because a lot of players are already treating leaked clips as confirmed final features. Development builds are not finished products. Mechanics shown in a leaked clip can change, get removed, or get reworked before launch. Textures, UI elements, and animations in an internal build are frequently placeholders. So while the footage gives a real look at how the game currently plays behind the scenes, none of it should be treated as a guarantee of what ships in November.
That said, the footage clearly reflects systems Rockstar has been building for years, including traffic density, police escalation, and NPC interaction depth, so it is not meaningless either. It’s a snapshot of a game still being refined, not a preview trailer.
What Happens Next
A few realistic outcomes are worth thinking through here. CyberLeek could keep posting footage right up until the account or its associated devices get restricted, especially if there’s an incentive to release as much as possible before an identity gets tied to the activity. Alternatively, the legal pressure alone might be enough to make the account go quiet permanently, which has happened with other high profile leak accounts once subpoenas or law enforcement involvement became public knowledge.
There’s also a real possibility that identifying CyberLeek does not immediately end the leaks if multiple people had access to the same build or shared material with each other before any of this became public. Whoever gets named through this subpoena process may not be the only person with access to unreleased GTA 6 content.
Frequently Asked Questions
Who is CyberLeek?
CyberLeek is the online alias behind the recent wave of leaked GTA 6 gameplay footage. The identity of the person or group behind the account has not been confirmed, and names circulating on social media as potential suspects remain unverified as of this writing.
Why did Take-Two subpoena Microsoft and Discord?
Take-Two is seeking account records, including email addresses, IP addresses, phone numbers, and linked accounts, in an effort to identify whoever has been distributing leaked GTA 6 footage through Discord servers and services connected to Microsoft, including Xbox and OneDrive.
What is the September 4 deadline?
September 4 is the date by which Microsoft and Discord must respond to Take-Two’s subpoenas with the requested records. It is not a confirmed date for CyberLeek’s identity to be revealed publicly.
Is the leaked GTA 6 footage real?
Neither Rockstar nor Take-Two has publicly confirmed the footage is authentic. However, the subpoenas describe the material as copyrighted, which several outlets have interpreted as an implicit acknowledgment that the content is genuine.
Will GTA 6’s release date change because of the leaks?
There is no indication so far that the leaks have affected Rockstar’s November release timeline. The subpoenas are focused on identifying the source of the leaks, not on the development schedule itself.
A Quick Note on What’s Confirmed vs. Speculated
To be transparent about sourcing here, the existence of the subpoenas, their September 4 deadline, and the specific categories of information requested come directly from the court filings as reported by Kotaku and corroborated by PC Gamer, GameSpot, and Windows Central. The identity of the person or people behind CyberLeek remains unconfirmed. Names being floated on social media are part of an ongoing aggregation of theories, not verified reporting, and should be treated accordingly until Microsoft, Discord, or Take-Two’s court filings produce something more concrete.
Sources
- Kotaku: Take-Two Subpoenas Microsoft And Discord Over GTA 6 Leaks
- PC Gamer: Take-Two kicks off GTA 6 leaker hunt with subpoenas
- GameSpot: Microsoft And Discord Subpoenaed In GTA 6 Leak Case
- Windows Central: Microsoft served a GTA 6 court subpoena by Take-Two
- MSN / Mashable: Take-Two subpoenas Microsoft, Discord, and GitHub