Take-Two Wants Its Second GTA 6 Leak Subpoena Sealed

The first round of subpoenas named names in public. The second one, filed the day after Rockstar's own Netflix showcase, asks a federal court to keep the details hidden from everyone but the judge.

A Second Discord Filing, This Time Under Seal

Take-Two filed the new request on 29 August in the Southern District of New York, the same court handling the original DMCA subpoenas against Microsoft and Discord over the CyberLeek leak. That first filing named six Discord servers outright and asked for account data tied to anyone active in them since 1 June. This one is narrower and, crucially, sealed: Take-Two doesn't want the public, or the people it's chasing, to see what it's asking for.

The company's reasoning, laid out in its own filing, is blunt: "Public disclosure of this information could compromise Take-Two's ongoing investigation" and could "tip off the alleged infringers as to the nature and progress of Take-Two's investigation." In other words, the first subpoena told the internet exactly which servers were under scrutiny. This one won't make that mistake twice.

Who the New Subpoena Targets

According to the filing, Take-Two is now seeking more information on one Discord user it had already identified from the first round, plus identifying data on one additional user it hadn't previously named. It's also asking for "more targeted information" tied to the community servers listed in the original subpoena, a narrower, more specific ask than the blanket membership sweep it filed on 21 August.

That's a meaningful shift in posture. The first subpoena cast a wide net across entire servers. The second reads like a company that has actual leads to chase, not just a membership list to comb through.

The YouTube Subpoena Got Dropped

The other new detail is what Take-Two walked back. Alongside the Microsoft and Discord requests, the company had also sought a subpoena covering YouTube. That request stalled: presiding judge John P. Cronan declined to sign off on it without more evidence connecting the named targets to the actual leaked footage. Rather than fight that ruling, Take-Two withdrew the request outright, telling the court it "no longer needs the particular information requested."

That's not the same as saying the YouTube angle went nowhere. It reads more like the investigation found what it needed through the Discord and Microsoft channels instead, or shifted its attention somewhere the YouTube data couldn't help. Either way, one of the three original subpoena targets is now off the table, at least in its original form.

Rapidly Evolving Is Take-Two's Own Word

Take-Two's filing describes its own investigation as "rapidly evolving and ongoing," and the timeline backs that up. The leak itself broke in mid-August. The first subpoenas landed on 21 August. This second, sealed request came just eight days later. For a case built on device IDs and server logs rather than a smoking-gun confession, that's a fast pace, and it lines up with what we tracked when on-chain trackers reportedly traced roughly $268,000 in CyberLeek's crypto cashouts through an exchange that likely required identity verification to open an account. Money trails and Discord device IDs are two very different threads pulling toward the same name.

Nothing here confirms an identity has actually been unmasked. A sealed filing means outsiders, us included, won't see the specifics until or unless Take-Two moves to a public civil suit, which is the point at which a name would typically surface. What's changed is the shape of the search: fewer targets, sharper questions, and a company that no longer wants its next move visible before it makes it.

What This Does and Doesn't Mean for November 19

As with the first subpoena, none of this touches the release date. Take-Two has reaffirmed 19 November through consecutive earnings calls, and a leak investigation running in parallel in a New York courtroom has no bearing on Rockstar's own production timeline. If the date is what you're actually tracking, our countdown hasn't moved.

What it does confirm is that Take-Two isn't done. The original subpoenas were a wide opening move; this one is a company narrowing in on specific accounts while trying not to spook them in the process. For the fuller history of how the leak itself unfolded, including why some of the footage was reportedly years old, our original breakdown from 19 August still holds up, and if you're trying to separate real leak activity from the noise around it, our guide to spotting fake GTA 6 leaks covers the pattern this case doesn't fit. We'll update this post if the sealed filing's contents become public or if a name attaches to a civil suit.