Anti-piracy and digital rights management firm Denuvo has cleared a significant procedural hurdle in its ongoing legal battle to unmask the anonymous game cracker known by the handle "voices38." Following judicial intervention and subsequent revisions to limit the scope of data requested, a California federal judge has officially authorized the company to serve subpoenas on major tech platforms Discord, Valve, and Reddit.
The legal maneuver marks the latest development in a Digital Millennium Copyright Act (DMCA) anti-circumvention lawsuit filed in September by the Irdeto-owned DRM company. The original complaint sought to shatter the cloak of anonymity surrounding the individual or collective behind "voices38," a handle that has gained notoriety for successfully bypassing Denuvo’s notoriously robust anti-tamper software. In its initial filings, the company identified the target almost exclusively through digital footprints, specifically citing a Discord user ID, a Reddit account, and seven distinct Steam profiles.
Seeking to connect these digital identifiers to a real-world identity, Denuvo initially moved to compel Discord, Valve, and Reddit to hand over a vast repository of user information. However, the sweeping nature of those original demands—which spanned 46 separate requests and included sensitive data such as payment records, transaction histories, login logs, and exhaustive post and comment archives—immediately triggered alarm bells regarding user privacy and judicial oversight.
"Voluminous Data" and Privacy Concerns
The initial pushback came on October 8, when U.S. District Judge Haywood S. Gilliam Jr. stepped in to scrutinize the breadth of the DRM company’s demands. In an order to show cause, Judge Gilliam directed Denuvo to justify why it required such "voluminous data contained in its requests for production" merely to identify and serve the defendant.
In his written assessment, the judge did not mince words regarding the potential overreach of the corporate subpoena requests. He noted that the plaintiff’s demands went well beyond what was reasonably necessary for the strictly limited purpose of unmasking an anonymous defendant, warning that such sweeping data collection posed substantial privacy concerns for everyday platform users who happened to share digital spaces with the target.
The scrutiny was particularly focused on the subpoena proposed for Valve, which was by far the broadest in scope. Denuvo had initially submitted 35 distinct requests targeting the seven Steam profiles alone, aiming to capture underlying payment methods, financial transaction histories, precise IP addresses paired with timestamps, device identifiers, and any accounts linked to the profiles.
Similarly, the proposed demands for Discord sought detailed server memberships and role assignments associated with the user, while the Reddit subpoena requested the complete public-facing and private history of posts and comments authored by "voices38," alongside a comprehensive log of the account’s subreddit memberships.
From 46 Requests to Nine
Rather than attempting to justify the extensive data haul in its entirety, Denuvo opted to revise its strategy. Confronted with the prospect of defending each individual request or adopting a narrower model subpoena previously utilized in similar intellectual property infringement cases, the company chose the path of revision.
A few days following the judge’s intervention, Denuvo filed a significantly streamlined set of subpoenas. The revised documents drastically cut down the number of individual demands, reducing the original 46 requests across the three platforms down to just nine targeted inquiries.
Under the revised framework, each platform is asked to produce documents strictly relating to the core identity and contact information of the account holder associated with the specified identifiers. The narrowed scope focuses on names, official identification documents, email addresses, phone numbers, and business or residential addresses. Crucially, the revised subpoenas also continue to request IP addresses, a data point that extends beyond the baseline model subpoena endorsed by the court.
Denuvo defended the inclusion of IP addresses and phone numbers by pointing to the realities of account creation on modern consumer platforms. The company argued in court filings that platforms such as Discord, Valve, and Reddit require relatively little verification upon initial sign-up and that the data they do collect is largely self-reported by users. Consequently, Denuvo argued that IP addresses and associated contact data may represent the single most reliable path to cutting through the pseudonym and identifying the human being behind the "voices38" handle.
The revised structure specifically targets nine distinct points of interest across the three platforms. This includes the Discord user ID 1427416652684984397, the primary Reddit account associated with the moniker, and seven specific Steam profile identifiers. Meanwhile, cryptographic platform FixedFloat, which Denuvo previously noted had been used by the cracker for cryptocurrency transactions, was notably absent from the final list of subpoena targets, as the company did not seek court permission to compel records from the exchange.
Subpoenas Granted
Following a review of the revised documents, Judge Gilliam granted Denuvo’s motion. The ruling gives the green light for the anti-piracy firm to officially serve Discord, Valve, and Reddit with the trimmed-down subpoenas, providing a legal mechanism to finally bridge the gap between a pseudonym on a screen and a physical person.
The newly issued subpoenas establish a strict timeline for compliance, setting November 3 as the official deadline for the tech platforms to produce the requested identity and contact documentation. Whether the information held by these companies will ultimately prove sufficient to unmask "voices38" and allow the lawsuit to proceed toward a resolution remains to be seen as the legal process moves forward.
Leave a Reply