The legal side of the GTA 6 leak campaign has moved faster than the leaks themselves this week. What began on August 20 as subpoena requests aimed at Microsoft and Discord has reportedly expanded to include X, and Discord has publicly signalled that it will not simply hand data over on receipt.
Two framing rules before the detail, because this gets misreported constantly. These are discovery instruments, not a lawsuit and not criminal charges. And nobody has been identified, charged or arrested.
What Has Been Filed
The known requests were filed in the Southern District of New York and, per Variety, Kotaku, GameSpot and Tom's Hardware, target:
- Microsoft, for internal business and investigative records connected to its own inquiry into the Cyberleek persona, reportedly including anything tied to GitHub, OneDrive or linked Xbox accounts, and extending to Windows device identifiers.
- Discord, for identifying information covering accounts in the servers used to spread the material, over a window running from June 1, 2026 to the present. Three servers were named in coverage.
- X, reportedly added since, seeking to unmask the account behind the leaks.
Coverage indicates the requested fields include account IDs, email addresses, IP addresses, phone numbers and linked accounts such as Xbox and Google profiles. A federal court granted the requests, with a reported response deadline of September 4, 2026.
Discord Has Not Actually Been Served
This is the detail most summaries skip. Speaking to Kotaku on August 24, Discord said it had not yet been served with any subpoena, and that when it is, in the words of its marketing director: "we'll evaluate the validity and scope before responding."
That is standard and it matters. A subpoena is a request backed by a court, not an automatic data transfer. Recipients routinely:
- Check that the request was properly issued and served.
- Assess whether the scope is proportionate to what is actually being investigated.
- Negotiate narrower terms, or file objections asking a court to limit it.
- In some cases, notify affected users before producing anything.
A September 4 deadline is a date by which a response is due. It is not a date on which anyone's data automatically changes hands.
Why Users Are Uneasy
The concern raised across coverage is about breadth rather than principle. Few people object to a company trying to identify whoever breached it. The worry is that the Discord request, as reported, reaches every account that was a member of the named servers across a multi-month window, rather than a targeted set of accounts connected to the original breach.
Server membership is a very low bar. Plenty of people join a GTA community server to talk about pre-orders and never touch leaked material. Under a broad request, their account ID, email, IP address and phone number could sit inside the same production as someone who actively distributed footage.
That is precisely the kind of overbreadth a recipient is expected to push back on, and precisely why Discord's "validity and scope" language is the most consequential sentence anyone has said this week.
What This Means If You Are Just a Fan
Practical, calm guidance:
- Being in a server is not a crime. Membership alone is not distribution and not infringement.
- Do not re-upload leaked footage. That is the behaviour that creates genuine exposure, both legally and in platform terms. See how the DMCA process works.
- Do not pay for anything. Not the token, not "full build" access, not early clips. More in the leak scam guide.
- Do not panic about a knock at the door. The realistic target of all this is the source of the breach and the accounts that seeded it, not people who watched a clip.
The Bigger Picture
Take-Two's approach here is recognisable. In 2022 the company pursued the leak of an earlier GTA 6 build through platform processes and cooperated with authorities, and that case eventually produced a conviction. Our background on that is in the Kurtaj retrial piece and the 2022 leak retrospective.
What is different in 2026 is the financial layer. This campaign attached a cryptocurrency to its output, which creates a documentary trail through regulated intermediaries that a pure leak would never generate. That thread is covered in the KuCoin analysis.
Rockstar itself has still said nothing publicly since August 6.
Frequently Asked Questions
Has Discord handed over user data?
No. As of August 24, Discord said it had not been served with a subpoena and would evaluate validity and scope before responding.
Could I be affected if I was in one of the servers?
Reported scope covers accounts in the named servers over a set window, which is why the breadth has drawn criticism. Being included in a data production is not an accusation of wrongdoing, and recipients frequently negotiate narrower terms.
Is Take-Two suing anyone?
Not publicly. These are subpoena requests used to identify unknown parties, which is a step that can precede litigation. No lawsuit and no criminal charge has been reported.
Does this delay GTA 6?
No. The game remains set for November 19, 2026 on PS5 and Xbox Series X and S, with the Extended Look on August 27 and preload on November 12.
The Bottom Line
The subpoenas are real, court-granted and now reportedly span three major platforms, which tells you Take-Two is treating this as a serious breach rather than a marketing inconvenience. But the September 4 date is a deadline for a response, not a handover, and Discord has already flagged that it intends to test the scope. For ordinary fans, the only meaningful action is the boring one: watch what you want, upload nothing, pay nobody.
Sources: Kotaku on Discord's response, Variety, GameSpot