Skip to content

BuildNot yet confirmed elsewhere1 publisher3 min readPublished

A DMCA notice over one GitHub repo now asks Microsoft for MachineGuids from three Discord servers

Take-Two's August 20 subpoenas seek install-level Windows identifiers, login IPs and OneDrive contents for every account that spoke in three servers since June 1. The predicate is a single repo takedown.

The Engineer · Build desk

How we use AISend a correction

Illustration accompanying A DMCA notice over one GitHub repo now asks Microsoft for MachineGuids from three Discord servers
Generated illustration

What happened

  • Take-Two filed two DMCA subpoenas in the Southern District of New York on August 20 to identify the "CyberLeek" persona behind this week's GTA 6 gameplay leaks.
  • The records demand covers every account that was a member of or communicated with three named Discord servers since June 1, alongside the three named handles.
  • The Microsoft subpoena is served on the company as GitHub's service provider, not as the operator of Xbox or OneDrive.
  • Kirkland & Ellis lawyers gave both respondents a September 4 deadline.

Why it matters

  • capability An identifier that survives hardware changes lets a plaintiff follow a person past the point where a fresh account or a new machine would have ended the trail, which name-and-IP discovery never...
  • exposure Membership in a server, not any alleged act, is the qualifying condition, so editors and lurkers land in the same production as the target.
  • precedent If one repository notice can carry a server-wide telemetry request, the entry cost of opening discovery on an entire community is a paralegal's email.
  • contradiction Serving Microsoft only in its GitHub capacity while asking for Xbox links and OneDrive files leaves the respondent free to read the same document as narrow or as total.

MachineGuid is not an account, and nobody signs up for it. It is a string Windows writes during installation, and Microsoft's own support documentation says it survives hardware changes unless the OS drive is replaced [9]. That durability is what makes it worth subpoenaing. Set beside an MSA device identifier, registration and last-login IP addresses, a phone number, and whichever Google and Xbox accounts are linked to the profile, it stops being telemetry and starts working as a join key between one machine and a set of online identities [2]. The filing is not really asking Microsoft to name a leaker. It is asking for the columns you would need to match Microsoft's records against Discord's.

The records window runs from June 1, 2026 to the present [3], which is 80 days as of the filing date [17]. Odyssey.gg, which the Microsoft subpoena calls a cheat community and labels the "operator's home" [5], did not exist for the first 18 of those days: its guild ID decodes to June 19, 2026 [11]. That leaves 62 days of server for an 80-day request [19]. The same attachment asks for device telemetry wherever certain "tool/file artifacts" were present, and no list of those artifacts appears in the exhibit [8]. The Discord petition also lists 1517326120867991592 as a user ID belonging to the handle Surfer24k, while both subpoena attachments list the same number as Odyssey.gg's server ID [12].

The paperwork authorising the Microsoft demand is one notice, sent on August 19 by a Take-Two IP paralegal to GitHub's copyright address over the repository zyrexdz/cyberleek-leak-research, asserting that it "must be completely disabled, there are no remedies to rectify this clear case of infringement" [7]. The subpoenas followed a day later [21]. At the time of Tom's Hardware's report the repository was still public, with nearly 500 stars, more than 30 forks and a commit pushed at 16:18 UTC [13]. A notice that has not taken down a repository is nonetheless carrying a request for the OneDrive contents of everyone who spoke in three servers [2][3].

Two of the three servers are Odyssey-branded. The third is DarkViperAU's, which the filings themselves describe as an editors' server and whose ID decodes to January 2017 [5][10]. Matthew Judge, the Australian creator who runs it, wrote on X that "I don't know anything" [14]. Video editors who posted there sit in the same production request as the cheat community. Microsoft and Discord have 15 days from filing to answer [4][18], and they get to decide whether Attachment A is read as written. Meanwhile a sixth leaked gameplay video went up on August 21 [15], six days before Netflix premieres An Extended Look [20].

What to watch

  • Whether Microsoft or Discord move to quash or narrow Attachment A before the September 4 return date, or simply produce.
  • Whether the GitHub repository comes down, since the notice over it is the stated predicate for the Microsoft subpoena.
  • Whether an amended filing corrects the number listed both as Odyssey.gg's guild ID and as user Surfer24k's account ID.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence62
Adoption34
Hype gap−12
Incentives68
Confidence55
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    Take-Two Interactive filed two DMCA subpoenas in the Southern District of New York on August 20, demanding that Microsoft and Discord identify the person or persons behind the "CyberLeek" persona responsible for this week's Grand Theft Auto 6 gameplay leaks.

    ReportedSupportedView cited source
  2. [2]

    Take-Two asks for MachineGuid and MSA device identifiers, registration and last-login IP addresses, phone numbers, linked Google and Xbox connections, and OneDrive contents for every account that communicated in three named Discord servers since June 1.

    ReportedSupportedView cited source
  3. [3]

    Attachment A asks Microsoft to return the identifier for every account that was a member of, or communicated with any of the three listed Discord servers between June 1, 2026 and the present, in addition to the three handles named in the filings.

    ReportedSupportedView cited source

Sources

1 independent publisher whose own reporting we read for this story.

  1. tomshardware.com

    1 article · August 22, 2026

    GTA 6 leaks prompt Take-Two to subpoena Microsoft for Windows device IDs of everyone in three Discord servers — daily gameplay leaks shatter cloud of secrecy around the much-hyped game

Share your take

Let Clarity write the post for you.

Signed-in readers get a short post drafted on this story in the register they choose — narrative, analytical, or a direct position — editable to the last word before it goes anywhere. The share buttons at the top of this story work without an account.

Topics and entities

Follow any of these and your For You feed starts watching them — no settings page required.

Topics

  • Persistent Device IdentifiersFollow
  • DMCA SubpoenasFollow
  • Developer and Community ExposureFollow
  • Game Leak EnforcementFollow
  • Platform Data DisclosureFollow
Loading related stories