Anti-piracy and digital rights management giant Denuvo has cleared a significant legal hurdle in its ongoing efforts to unmask the anonymous game cracker known by the online handle "voices38." A California federal judge has officially granted the company permission to issue subpoenas to major tech platforms including Discord, Valve, and Reddit. While the initial legal filings faced immediate skepticism from the bench due to sweeping demands for private user data, a heavily revised set of requests has satisfied the court’s strict privacy concerns, opening the door for investigators to finally attach a real-world identity to the elusive pseudonym.
The legal battle stems from a Digital Millennium Copyright Act (DMCA) anti-circumvention lawsuit that the Irdeto-owned company initiated in September. In its initial complaint, Denuvo took aim at the individual or collective operating under the "voices38" banner, a handle that has gained notoriety within digital circles for successfully bypassing the company’s anti-tamper DRM software used to protect major video game releases. At the time the lawsuit was filed, however, the anti-piracy firm lacked a concrete legal name or physical address for the defendant, identifying the target solely through a Discord user ID, a Reddit account handle, and a collection of seven distinct Steam profiles.
Seeking to bridge the gap between a digital pseudonym and a legal defendant who could be formally served with court documents, Denuvo initially petitioned the California federal court for broad subpoena powers. The proposed demands went far beyond basic contact details, asking platforms like Discord, Valve, and Reddit to turn over payment records, transaction histories, login logs, and exhaustive post and comment histories. For Valve alone, the company drafted a list of 35 separate demands covering individual Steam profiles, seeking everything from linked accounts and device identifiers to detailed IP addresses accompanied by precise timestamps.
That sweeping approach immediately triggered red flags within the judicial system. On October 8, U.S. District Judge Haywood S. Gilliam Jr. stepped in, ordering Denuvo to justify why it required such a massive trove of information merely to identify and serve an anonymous defendant. In his written order, Judge Gilliam noted that the plaintiff’s requests for production extended well past what was reasonably necessary for the limited purpose of unmasking the account holder, warning that granting the demands in their original form could introduce substantial privacy violations for internet users.
Rather than letting the broad subpoenas move forward, the judge provided Denuvo with two distinct paths: thoroughly justify each individual data request point by point, or significantly scale back the scope of the demands by adopting a narrower subpoena model utilized in similar digital copyright and trademark infringement cases.
Opting for the more streamlined approach, Denuvo quickly returned to the court with a dramatically revised set of subpoenas. The updated filing stripped away dozens of invasive demands, reducing a sprawling total of 46 separate requests down to a targeted nine. Gone from the documentation were requests for payment methods, crypto-adjacent transaction histories, login logs, and historical archives of posts or comments made across Reddit communities or Discord servers.
Instead, the newly authorized subpoenas focus squarely on core identity and contact information. For each of the targeted identifiers—comprising the single Discord account, the designated Reddit profile, and the seven Steam accounts—the platforms are now asked to produce any matching names, official identification documents, registered email addresses, telephone numbers, and physical business or residential addresses.
Notably, the revised subpoenas continue to request IP addresses, a data point that extends slightly beyond the baseline model recommended by the judge during the initial review. To justify retaining IP requests, Denuvo argued that modern online platforms historically collect very little personal information at the point of account creation, and what little data they do gather is typically self-reported by the user. Consequently, the company asserted that IP logs and telephonic contact markers may represent the absolute only reliable path toward establishing the true identity of the individual behind the keyboard. Because Denuvo currently possesses nothing more than a pseudonym, the company maintained that these technical identifiers are indispensable to the progression of the lawsuit.
While Denuvo’s legal team previously uncovered hints of cryptocurrency activity linked to the cracker via the crypto exchange FixedFloat, the platform was ultimately left off the final list of subpoena targets, keeping the immediate focus fixed squarely on the three major consumer tech ecosystems where "voices38" maintained a digital footprint.
Following the submission of the trimmed-down documentation, Judge Gilliam reviewed the adjustments and formally granted the motion, paving the way for Denuvo to officially serve the revised subpoenas to Discord, Valve, and Reddit. The newly issued court orders establish a firm compliance deadline for the platforms to hand over the requested documentation, setting the stage for a crucial disclosure window. Whether the administrative records held by these companies will contain enough definitive evidence to unmask "voices38" and allow the lawsuit to proceed toward a formal resolution remains to be seen as the digital investigation enters its next phase.
