- Legal Action: Take-Two Interactive filed DMCA subpoenas on August 20, 2026, to identify the “CyberLeek” group responsible for recent Grand Theft Auto 6 gameplay leaks.
- The Threat: CyberLeek is operating a cryptocurrency token scheme and claims to have a “Dead Man’s Switch” set to release a full playable build if the group is stopped.
Take-Two Targets CyberLeek with Federal Subpoenas
Take-Two Interactive has initiated a significant legal offensive to unmask the entity behind the recent surge of Grand Theft Auto 6 leaks. On August 20, 2026, the publisher filed multiple DMCA Section 512(h) subpoenas in the Southern District Court of New York. According to reports regarding how Take-Two’s legal action to find the GTA 6 leaker begins, these filings target Microsoft, Discord, and X to secure identifying data for the persona known as CyberLeek.
The subpoenas demand that Microsoft and Discord produce a wide range of information by a deadline of September 4, 2026. This data includes account IDs, IP addresses, registration emails, and the contents of OneDrive accounts associated with the leaker. This focus on cloud storage follows broader industry trends seen in Windows 11 26H2 system updates and data management. Specifically, Take-Two Subpoenas Microsoft and Discord to uncover the origins of the footage that has appeared on several high-profile platforms.
Gameplay Leaks and the Cryptocurrency Scheme
Since August 18, 2026, CyberLeek has released approximately ten gameplay videos of Grand Theft Auto 6. These clips have showcased various mechanics, including driving physics, gunfights, and a new plane mini-game. However, the group is not just leaking information for notoriety; they are operating a website that promotes a “CyberLeek” cryptocurrency token. As documented by reports of the GTA 6 leaker releases even more gameplay videos, users are being encouraged to spend these tokens to vote in polls determining which piece of stolen content will be released next.
The legal documents name specific Discord servers involved in the distribution of this material, including Ødyssey.gg, “! Odyssey”, and the community server belonging to content creator Matthew “DarkViperAU” Judge. This aggressive distribution comes at a time when the industry is still reeling from 3 takeaways from Big Tech’s layoffs, which have affected security and oversight across many major platforms.
The CyberLeek Edict and Future Risks
Beyond the leaks, the group published a manifesto titled the “CYBERLEEK Edict.” In this document, the hackers demand that the gaming industry end digital preorders and ensure mandatory offline access for all single-player titles. While these demands mirror common player frustrations, such as those seen when a Call of Duty Switch 2 port disappoints testers, the group’s methods remain criminal. Most notably, CyberLeek claims to have a “Dead Man’s Switch” programmed to automatically upload a full playable build of Grand Theft Auto 6 if the group members are apprehended or their operations are halted.
This situation develops as the legal system continues to deal with previous security breaches. Arion Kurtaj, the hacker responsible for the 2022 leaks, was moved from a secure hospital to a standard prison in July 2026, with a retrial set for November 2026. Amidst this chaos, Rockstar Games is attempting to maintain its official marketing schedule, with an “Extended Look” reveal for the game scheduled to premiere on Netflix on August 27, 2026.
