Anti-piracy and digital rights management giant Denuvo has secured judicial approval to issue subpoenas to major tech platforms Discord, Valve, and Reddit in an ongoing effort to unmask the anonymous individual or group operating under the handle "voices38." The development comes after a federal judge in California expressed significant privacy reservations regarding the scope of Denuvo’s initial demands, forcing the company to dramatically scale back its requests from dozens of data points down to a targeted handful focused primarily on core identity and contact information.
The legal battle stems from a Digital Millennium Copyright Act (DMCA) anti-circumvention lawsuit that the Irdeto-owned company filed in September. Within its initial complaint, Denuvo targeted the elusive game cracker using only digital identifiers: a Discord user ID, a Reddit account, and seven distinct Steam profiles associated with the "voices38" handle, which has gained notoriety for bypassing Denuvo’s notoriously robust anti-tamper DRM software. Seeking to uncover the real-world identity behind these online footprints, Denuvo initially petitioned the court for permission to compel Discord, Valve, and Reddit to hand over a massive trove of user information.
However, the breadth of those initial demands immediately ran into a roadblock in the federal court system. On October 8, U.S. District Judge Haywood S. Gilliam Jr. issued an order requiring Denuvo to justify why it needed the voluminous data contained in its requests for production to properly identify and serve the defendant. Judge Gilliam pointedly noted that the plaintiff’s requests went well beyond what was strictly necessary for the limited purpose of identifying an anonymous defendant, warning that such sweeping data collection could pose substantial privacy concerns for everyday internet users and account holders.
The scope of the original requests was indeed expansive. The proposed subpoena directed at Valve was particularly broad, encompassing 35 separate requests across the seven targeted Steam profiles. Those demands sought sensitive financial and technical records, including payment methods, detailed transaction histories, IP addresses paired with precise timestamps, device identifiers, and cross-platform linked accounts. Meanwhile, the subpoena directed at Discord asked for exhaustive logs regarding the account’s server memberships and specific role assignments within those communities. Reddit was similarly asked to surrender the complete public posting and comment histories generated by "voices38," alongside a comprehensive log of the account’s subreddit memberships and subscriptions.
Faced with the judge’s skepticism and the risk of having its discovery requests blocked entirely, Denuvo was given a clear choice: justify each of the 46 individual data requests in painstaking detail, or revise the subpoenas to mirror a much narrower, privacy-conscious model used in previous similar cases. The company ultimately opted for the latter path, submitting a significantly streamlined set of revised subpoenas that reduced the total number of demands from 46 down to just nine.
The newly approved subpoenas take a far more targeted approach, focusing exclusively on documents and records relating to the true identity and direct contact information of the respective account holders. Each of the nine revised requests now covers standard identifying details such as legal names, official identification documents, email addresses, IP addresses, phone numbers, and physical residential or business addresses. Gone from the demands are the contentious requests for payment data, transaction histories, login logs, and historical archives of posts or comments that had originally triggered the court’s privacy alarms.
Nevertheless, the revised demands do not drop everything beyond basic directory information. Denuvo continues to press for IP addresses and telephone numbers associated with the accounts, parameters that stretch slightly beyond the strict template of the model subpoena referenced by Judge Gilliam during the initial hearings. To justify this retention, Denuvo has argued before the court that digital platforms typically collect very little personal information upon initial user registration, and that whatever data is provided by users is almost entirely self-reported and therefore potentially falsified. Consequently, the company maintains that IP addresses may represent the single most reliable investigative path to uncovering the true identity of the defendant, given that they currently possess nothing more than a pseudonym.
An accompanying review of the legal filings indicates that while Denuvo previously surfaced evidence of cryptocurrency transactions conducted by the cracker on the digital exchange FixedFloat, that crypto platform was ultimately left off the final list of subpoena targets, leaving the tech giants as the primary conduits for unmasking the suspect.
Following the submission of the revised documents, Judge Gilliam reviewed the adjustments and formally granted the motion. This judicial sign-off empowers Denuvo to officially serve the revised subpoenas upon Discord, Valve, and Reddit, compelling them to turn over the requested identity records so that the formal lawsuit can proceed against a named individual rather than an anonymous handle.
The newly issued subpoenas establish a strict deadline for the platforms to produce the targeted information, with compliance expected by November 3. Whether the data held by these companies will ultimately prove sufficient to attach a real-world name to the elusive "voices38" handle remains to be seen as the litigation unfolds in California federal court.
Leave a Reply