One detail about the GTA 6 leak legal filings keeps getting flattened in coverage: Take-Two did not sue anybody. There is no lawsuit, no defendant, no hearing and no judge who weighed the merits. What was granted in the Southern District of New York on August 20 was a DMCA subpoena, an unusual instrument that exists precisely so that a copyright owner can skip all of that.
Understanding what it is explains both why it happened so fast and why it may deliver less than people expect.
What Section 512(h) Actually Does
The Digital Millennium Copyright Act contains a provision, section 512(h), that lets a copyright owner obtain a subpoena to identify an alleged infringer from a service provider, without filing a lawsuit first.
The process is deliberately lightweight. The rights holder submits a proposed subpoena, a copy of a takedown notice, and a sworn declaration that the purpose is to identify an alleged infringer and that the information will be used only to protect rights under copyright law. A court clerk issues it. No judge evaluates the underlying claim, and nobody argues the other side.
That is why the reporting timeline looked so compressed. Takedowns began within days of the first clip on August 18, and subpoena requests were reported on August 20. That is not a court moving unusually quickly. It is a mechanism designed not to require a court to think.
What It Can Reach
The requested fields reported across coverage of the filings are the standard set: account identifiers, email addresses, IP addresses, phone numbers, and linked accounts. For Microsoft, reporting described records tied to GitHub, OneDrive and connected Xbox accounts. For Discord, the request reportedly extends to server membership.
Two platforms received the original requests, and reporting later indicated X was also targeted. The response deadline is September 4, 2026. Our full subpoena breakdown covers each request in detail.
Note what is not on that list. A DMCA subpoena is a discovery tool for identity. It does not compel content removal, it does not impose penalties, and it does not establish that anyone did anything wrong.
The Limits Courts Have Imposed
This is the part that matters and the part almost nobody covers.
Section 512(h) has been narrowed significantly by federal appellate courts. The leading decision, from the D.C. Circuit in 2003, held that a 512(h) subpoena cannot be served on a provider acting purely as a conduit for traffic, because the statute is built around notice-and-takedown for material a provider is storing or linking to. A provider that simply carries packets has nothing to take down and therefore falls outside the mechanism. A federal appeals court in the Eighth Circuit reached a similar conclusion two years later.
The practical consequence is straightforward. Take-Two can use this tool against platforms that host material. It generally cannot use it to make a residential internet provider hand over the subscriber behind an IP address. That second step, if anyone wants it, requires an actual lawsuit, usually filed against unnamed defendants, followed by court-supervised discovery.
So the realistic sequence is a ladder, not a single move:
- Takedown notices, which began immediately. Covered in our DMCA takedowns explainer.
- DMCA subpoenas to hosts, where things currently stand.
- A civil suit against unnamed defendants, if the identity information is insufficient.
- Referral to criminal authorities, which is a decision for prosecutors rather than for Take-Two.
Why the Deadline Is Widely Misread
September 4 is generating a lot of countdown posts, so it is worth being blunt about what that date is.
A response deadline is the date a response is due. A response can be a production of records. It can also be an objection, a motion to quash, a request for an extension, or a partial production with categories withheld. Nothing about the date guarantees that data moves, and nothing about it guarantees that anything becomes public. Subpoena returns in matters like this are frequently never disclosed at all.
Discord had reportedly not even been served as of August 24, and its marketing director said publicly that the company would evaluate validity and scope once it was. That is a normal position for a platform to take, not a signal of resistance. Our coverage of the platform responses has the detail.
The Anonymous Speech Problem
There is a genuine countervailing interest here, and courts take it seriously. Unmasking an anonymous internet user implicates First Amendment protections for anonymous speech, and targets or platforms can move to quash on those grounds.
That argument is much weaker where the underlying conduct is straightforward distribution of copyrighted material rather than commentary. But it is not nothing, and it is one of several reasons why a subpoena issued in August may produce nothing visible for months.
Frequently Asked Questions
Has Take-Two sued the leaker?
No. As of publication there is no reported lawsuit. What exists are takedown notices and DMCA subpoenas seeking identifying records from platforms. That is a pre-litigation step.
Can Take-Two get someone's home address from this?
Not directly through a DMCA subpoena. It can obtain account records held by a platform, which may include an IP address. Converting an IP address into a subscriber identity generally requires a different and slower legal process.
What happens on September 4?
The platforms served are due to respond. Responses may be productions, objections or motions. There is no requirement that anything be made public, and in most matters of this type nothing is.
Could criminal charges follow?
Possibly, but that is a prosecutorial decision, not a company one. Criminal copyright infringement in the United States generally requires wilfulness plus either commercial advantage or distribution of a work being prepared for commercial release. Our legal exposure piece covers the statutes people keep citing and where each one currently stands.
The Bottom Line
The DMCA subpoena is fast because it deliberately bypasses judicial review, and limited for the same reason. It gets Take-Two account records from platforms that host material, and stops well short of the doorstep. Treat September 4 as a procedural checkpoint rather than a reveal, and be sceptical of anyone presenting it as the day the story breaks open.
This article is general information about how the mechanism works, not legal advice.