The latest GTA VI leaks have taken a new turn. Take-Two Interactive, the parent company of Rockstar Games, has moved beyond copyright takedown requests and started using the courts to identify the person or group behind the recent Grand Theft Auto VI footage. The publisher has sought information from several major technology platforms that may hold digital records connected to the accounts involved in spreading the leaked material.
Take-Two Is Now Looking for the People Behind the Leak
When the first new GTA VI footage appeared online, Rockstar’s immediate response was familiar: copyright claims and takedown requests were used to remove copies of the material.
The situation has now escalated.
Take-Two has obtained court subpoenas targeting Microsoft and Discord. Microsoft has been asked to provide information that could help identify the person or people associated with the CyberLeek persona. The request reportedly covers account information as well as records connected to Microsoft services such as OneDrive.
Discord is another important part of the investigation because conversations and account records could potentially reveal connections between anonymous usernames and real-world identities.
The goal is therefore no longer simply to remove GTA VI leaks from the internet. Take-Two appears to be trying to reconstruct the entire trail behind them.
X and Google Are Now Part of the Investigation
Take-Two’s legal campaign has reportedly expanded further. New DMCA subpoenas targeting X and Google name several accounts, including CyberLeeks, Surfer24k and CyberLeek_ar_io. The company is seeking identifying information that could help connect those online personas to actual individuals.
Google is particularly interesting because the request reportedly references a specific YouTube video associated with the leak.
That suggests the investigation is becoming increasingly precise. Instead of looking for an anonymous “GTA VI hacker” in the abstract, Take-Two is now following specific accounts, videos and pieces of online activity across multiple services.
However, being named in a subpoena does not mean that an account holder has been confirmed as the person responsible for the leak. The available information indicates that Take-Two is seeking records as part of its investigation, while the identity of CyberLeek remains publicly unknown.
What Was Actually Leaked?
The latest wave of GTA VI leaks began spreading online in August and included several gameplay clips, screenshots and images reportedly connected to the upcoming game.
The leaked material allegedly showed protagonist Jason in gameplay situations, while other images appeared to reveal a large portion of the Leonida map. Some of the footage was quickly removed following copyright claims, but copies had already spread across social media and video platforms.
The incident became even more unusual because the people behind the CyberLeek identity did not simply publish the footage and disappear. The posts were accompanied by a manifesto criticizing aspects of modern game distribution, as well as promotion for a cryptocurrency project associated with the CyberLeek name.
That public activity may have created additional evidence for investigators to follow.
The Timing Could Hardly Be Worse
The leak has arrived at a particularly sensitive moment for Rockstar.
The studio is preparing another major promotional event for Grand Theft Auto VI. Rockstar’s official website confirms that an Extended Look at the game is scheduled for August 27 at 3 PM ET. GTA VI is currently scheduled to launch on November 19, 2026, for PlayStation 5 and Xbox Series X|S.
That makes the timing of the leaks especially awkward.
Rockstar has spent years carefully controlling information about GTA VI, releasing official trailers, screenshots and character details in a tightly managed campaign. The leaked footage potentially disrupts that strategy by allowing fans to see unfinished material before Rockstar is ready to present it.
At the same time, the studio cannot simply stop its marketing campaign. The official release is still approaching, and the August 27 presentation remains one of the most important moments in the game’s pre-launch promotion.
The Legal Hunt Could Continue for Months
It is still unclear whether Take-Two will successfully identify the person or group operating under the CyberLeek name.
What is clear is that the publisher is taking the incident seriously. Rather than relying solely on takedown notices, Take-Two is now seeking information from several major platforms that may possess different pieces of the same digital trail.
If those records can be connected, anonymous usernames could eventually lead investigators to real accounts and identities.
For now, however, the biggest mystery remains unsolved: who actually obtained the GTA VI footage in the first place?
While Rockstar prepares for its official Extended Look on August 27 and the game’s November 19 launch, Take-Two is running a parallel operation behind the scenes. The company is no longer simply trying to erase leaked videos from the internet. It is trying to find the people who put them there.
And judging by the growing list of platforms involved, that investigation is only getting started.
