The hunt for whoever the individual that leaked Grand Theft Auto VI is, who goes by the handle CyberLeek, not slowing down. Take-Two Interactive has filed a fresh round of DMCA subpoenas, this time aimed at X and Google, and unlike the first batch that went after Microsoft and Discord, these name specific accounts the company wants unmasked, specifically the handles CyberLeeks, Surfer24k, and CyberLeek_ar_io.
What this means is that Take-Two is now naming particular personas and demanding that X and Google hand over the identifying data behind them, the emails, phone numbers, and IP addresses. The Google request even points at a specific YouTube video, which means that the investigation has moved from "who was near this" to "tell us who these exact accounts belong to."
In a nutshell, a DMCA subpoena is a legal shortcut that lets a copyright holder force a platform to reveal an anonymous user's account details, fast tracking the process without the need to file a full lawsuit. Take-Two is now running that same play across several services that holds a different piece of the latest Grand Theft Auto leak puzzle at once.
String it all together and you no longer have scattered handles, you have a map of one operation spread across the whole internet, but that's also if some of them aren't just individuals pretending to be the leaker to jump on the hype.
Take-Two's subpoena trail in the GTA 6 leak hunt
Target | What is being demanded | What that platform holds |
|---|---|---|
Microsoft, with GitHub and OneDrive | Account and file records for the CyberLeek persona | Where leaked files and data trails sit |
Discord | Identifying data for accounts in listed servers since June 1 | Where the leak was likely coordinated |
X | The account data behind CyberLeeks, Surfer24k, and CyberLeek_ar_io | Where the clips and the memecoin were pushed |
Google and YouTube | Records tied to the named personas and a specific video | Where a leak video was uploaded |
Take-Two is shooting across every platform the leaker used, turning anonymous handles into real names.
Even though some of the handles aren't directly linked to the actual leaker, they still found themselves on X and YouTube, which is not where you go to quietly hide a leak. They are where you go to when you want to grab the internet's attention by the neck. CyberLeek did not just dump footage and vanish either. The group plastered every clip with a memecoin ad and a whole manifesto, which meant being loud, public, and relentlessly on-brand across exactly the mainstream platforms that answer US court orders the fastest.
We flagged this when we noted that Rockstar Games still does not officially know who did it, but that the crypto angle created the very same trailer that Take-Two is now pulling on, turning it into a liability rather than a shield.
A leaker who wanted nothing but to make a point could have gone silent and been nearly impossible to trace even if they did try to pivot to this by burning roughly $1 million to $1.5 million worth of their own developer tokens to prove they were not planning a classic crypto "rug pull" scam. By pumping a coin in the first place, they built a promotional footprint, and a promotional footprint is a paper trail with a bow on it.
To be fair, these filings are a request for records tied to an account, and the names on the list are mere handles. Nobody has been publicly identified, charged, or proven to be anyone in particular, but it doe show how Take-Two is willing to chase this across every platform the leaker touched, and it has the lawyers and the budget to keep going.
Just like what we already said before, leaker picked a losing fight against the wrong opponent.
None of this has done a thing to the game, for the record. The leaked clips came and mostly went, the reveal is still on, and the launch is still locked to November 19. What is unfolding now is the slower, quieter half of the story, the part where a company with unlimited legal budget methodically works backward from a username to a name.
Whether it gets there before GTA 6 ships is anyone's guess, but the proverbial walls sure are closing a lot faster than a memecoin can outrun.