Anti-piracy and digital rights management giant Denuvo has cleared a significant legal hurdle in its ongoing campaign to unmask the anonymous game cracker operating under the handle "voices38." A California federal judge has officially granted the Irdeto-owned company permission to issue revised subpoenas to major tech platforms Discord, Valve, and Reddit. While the initial legal filing asked for a sweeping and broad collection of user metrics and personal data, judicial intervention has successfully narrowed the scope of the investigation, balancing the company’s enforcement rights against the privacy protections of the targeted accounts.
The legal battle stems from a Digital Millennium Copyright Act (DMCA) anti-circumvention lawsuit that Denuvo filed in September. In that initial complaint, the prominent anti-tamper developer targeted the individual or collective behind the "voices38" handle, which has gained notoriety within digital piracy and gaming circles for successfully bypassing Denuvo’s sophisticated anti-piracy protections. Because the corporation only possessed online pseudonyms, its original legal complaint identified the defendant using a single Discord user identification string, a Reddit account handle, and seven distinct Steam user profiles.
Seeking to translate these digital footprints into legal identities, Denuvo initially requested extensive documentation from Discord, Valve, and Reddit. The proposed subpoenas went far beyond basic contact details, seeking payment data, transaction histories, login logs, device identifiers, server memberships, and exhaustive post and comment histories. However, this expansive approach immediately triggered skepticism from the presiding magistrate, setting up a confrontation over the boundaries of digital privacy in civil copyright litigation.
On October 8, U.S. District Judge Haywood S. Gilliam Jr. stepped in, ordering Denuvo to justify why it required the voluminous data outlined in its requests for production. In his order, Judge Gilliam noted that the plaintiff’s demands went well beyond what was strictly necessary for the limited purpose of identifying and serving the defendant, warning that such broad requests posed substantial privacy concerns for online users.
The most expansive of the initial demands had been directed at Valve, covering 35 distinct requests across the seven associated Steam profiles. These requests sought to unearth sensitive financial and technical footprints, including payment methods, historical transaction logs, IP addresses paired with precise timestamps, unique device identifiers, and links to any auxiliary accounts. Discord was similarly asked to surrender server memberships and specific role assignments, while Reddit was expected to hand over complete historical archives of posts, comments, and subreddit memberships associated with the "voices38" account handle.
Confronted with the court’s skepticism, Denuvo was given a clear choice: either provide a detailed justification for every single data point requested or significantly revise and narrow the subpoenas to align with established models used in similar federal copyright cases.
Opting for the path of revision, Denuvo scaled back its demands dramatically. Within days, the company filed a newly structured set of subpoenas that reduced the total number of requests from 46 down to nine. The revised documents focus narrowly on obtaining the core identity and contact information of the account holders. Each of the nine targets—encompassing the Discord account, the Reddit profile, and the seven Steam accounts—is now asked to produce foundational identifying records, including formal names, identification documents, email addresses, phone numbers, and physical business or residential addresses.
Crucially, the revised subpoenas completely abandoned earlier demands for payment information, financial transaction histories, login logs, and public or private messaging archives such as comments and posts. Yet, the updated filings retained requests for IP addresses and telephone numbers. This inclusion went slightly beyond the standard model subpoena referenced by Judge Gilliam, prompting Denuvo to provide additional justification to the court.
In its arguments to the bench, Denuvo explained that digital platforms typically collect minimal information during the initial user registration process, much of which relies entirely on self-reported data provided by the user. Consequently, the company argued that IP addresses represent the most reliable, and potentially the only, practical path to tracing the digital footprints back to a physical person. Because Denuvo started its investigation with nothing more than a pseudonym, obtaining these network connection logs is framed as an essential step to establishing jurisdiction and serving the lawsuit effectively.
Interestingly, while Denuvo’s earlier filings noted the discovery of cryptocurrency transactions linked to the cracker on the crypto exchange FixedFloat, the platform was ultimately left off the final list of subpoena targets submitted to the court. Despite identifying financial activity on the exchange, Denuvo chose not to pursue a direct subpoena against the cryptocurrency platform at this stage of the litigation.
Following the submission of the revised and streamlined documents, Judge Gilliam reviewed the updated motions and formally granted the request. The approval authorizes Denuvo to officially serve the newly tailored subpoenas upon Discord, Valve, and Reddit.
The newly issued subpoenas establish a strict compliance deadline of November 3 for the platforms to review their internal records and produce the requested identifying information. Whether these network logs and contact details will be sufficient to pierce the veil of anonymity and attach a real-world identity to the "voices38" handle remains to be seen as the federal lawsuit moves forward.
Leave a Reply