← BACK TO INSIGHTS FEED

Take-Two subpoenas Microsoft, Discord, and X in coordinated GTA 6 leaker hunt

Summary
Take-Two filed federal subpoenas against Microsoft, Discord, and X on August 20 targeting the GTA 6 leaker
Requests demand IP addresses, phone numbers, device identifiers, and linked account data across OneDrive and Xbox
Discord scope extends to full member data of three servers dating back to June 1
All three platforms confirmed cooperation without public resistance, with a September 4 compliance deadline
Take-Two lost over $2 billion in market value yet held the November 19 date and August 27 Netflix reveal
"This is obviously not how we intended for you to see the game after all this time"
— Rockstar Games statement, August 26
01

Three-platform subpoena strike targets infrastructure, not just the leaker

Take-Two hit Microsoft (OneDrive, Xbox records), Discord (server membership), and X (posting records) within days of leaks surfacing
Data demand covers IP addresses, phone numbers, device identifiers, and linked account data - not content takedowns
Discord scope reaches back to June 1, mapping a pre-leak coordination window
September 4 compliance deadline compresses any window to negotiate or narrow scope
02

Platform cooperation establishes new baseline for publisher legal leverage

Microsoft, Discord, and X each confirmed compliance - no platform challenged scope or moved to narrow it
First documented case of a publisher compelling simultaneous user data disclosure from three major platforms
The 2022 GTA 6 hacker is currently in prison awaiting retrial - Take-Two has converted prior legal action into prosecution
Precedent for publishers: platform cooperation is now the default response to IP subpoenas, not a contested one
03

$2B market hit did not shift the marketing calendar

Take-Two lost more than $2 billion in market value in the week after leaks began August 17-18
Netflix Extended Look aired August 27 as planned; November 19 launch date held
A senior Rockstar executive sent an internal memo denouncing the leaker and affirming team output
CyberLeek tied the leak to a memecoin that briefly spiked before holdings were burned - strengthening Take-Two's fraud angle
Rockstar accelerated the December 2023 trailer when leaked; this time it held schedule and let legal lead
04

The response blueprint: legal first, PR second, morale in parallel

Subpoenas filed August 20 - three days after leaks began, six days before Rockstar's public statement
Rockstar's statement neither confirmed nor denied leaked details, preserving reveal value for August 27
Internal memo ran concurrent with external legal action, containing team morale risk separately
Operative variables for studios facing breach: filing speed, platform breadth, and separation of legal from PR tracks

What this means

For Publishers & Developers: Take-Two's timeline (subpoenas within 72 hours, PR statement day six) is now the benchmark incident-response clock for major IP leaks
For Service Vendors: Discord, Microsoft, and X cooperated without resistance - platform TOS enforcement against leak coordination is no longer a negotiation, factor it into moderation SLAs
Events
Companies
Games
Locations
—

COMPILED BY

RELATED ARTICLES
EXPLORE MORE

Comments (0)

No comments yet. Be the first to share your thoughts!

We use essential and non-essential cookies. You can accept all, deny all or manage your preferences. Learn more: Cookie Policy

You can change your preferences anytime via "Cookie Settings" in the footer.