Anti-piracy and digital rights management (DRM) giant Denuvo has cleared a significant procedural hurdle in its ongoing legal crusade against online software piracy. A California federal judge has officially granted the Irdeto-owned company permission to serve subpoenas on major digital platforms including Discord, Valve, and Reddit. The legal maneuver represents a targeted effort by the DRM provider to unmask the person or group operating under the prominent online handle “voices38,” an anonymous figure accused of systematically bypassing Denuvo’s sophisticated anti-tamper security measures.
The legal confrontation stems from an anti-circumvention lawsuit filed under the Digital Millennium Copyright Act (DMCA) earlier this year in September. In its initial complaint, Denuvo targeted the elusive developer by identifying them strictly through digital footprints left across the internet—specifically, a single Discord user ID, a Reddit account handle, and seven distinct Steam profiles. Because the company faced a pseudonymous defendant with no clear real-world identity, pursuing litigation required legal intervention to compel the platform operators to hand over account registration records.
Initially, Denuvo cast a wide legal net. The company’s original subpoena requests aimed at Discord, Valve, and Reddit sought an extensive collection of data that extended far beyond basic contact details. The proposed orders asked for sensitive financial metrics, including detailed payment methods, crypto transaction records, and full billing histories. Furthermore, the requests demanded login logs, comprehensive post and comment histories across Reddit, and detailed server memberships on Discord. However, this aggressive approach immediately triggered judicial pushback concerning user privacy rights.
On October 8, United States District Judge Haywood S. Gilliam Jr. intervened by issuing an order requiring Denuvo to explain why such voluminous data was strictly necessary for the limited purpose of identifying and serving the defendant. Judge Gilliam expressed pointed skepticism regarding the scope of the demands, noting that the requests for production reached well beyond what was reasonably required to ascertain the identity of the account holder and carried the potential to create substantial privacy violations for internet users.
The judicial scrutiny focused heavily on the sheer breadth of information sought from each platform. The proposed subpoena directed at Valve Corporation was notably expansive, targeting thirty-five distinct categories of information across the seven associated Steam profiles. These demands encompassed historical financial transactions, IP addresses coupled with exact timestamps, unique device identifiers, and cross-platform linked accounts. Similarly, Discord was requested to provide complete records of server memberships and internal role assignments, while Reddit was asked to surrender the full public and private posting history of the user alongside subreddit subscription lists.
Faced with the court’s skepticism, Denuvo was given a clear choice: either provide a rigorous justification for every single data point requested or fundamentally revise the subpoenas to adopt a much narrower, privacy-conscious model previously utilized in analogous federal cases. Opting for the latter path, the company significantly scaled back its demands to align with judicial expectations.
Within days of the judge’s order, Denuvo submitted a heavily revised set of subpoenas that drastically reduced the total number of data requests from forty-six down to just nine focused items. The updated legal demands eliminated all inquiries regarding payment data, transaction histories, login logs, and user-generated content such as posts and comments. Instead, the revised subpoenas focused strictly on fundamental identification and contact information associated with the specific target accounts.
The narrowed demands directed at Discord, Reddit, and the seven Steam profiles now center on core identifiers such as legal names, government-issued identification documents where available, registered email addresses, associated telephone numbers, and physical residential or business addresses. Despite these reductions, Denuvo retained requests for historical IP addresses, a move that went beyond the baseline model subpoena recommended by the judge. To justify this retention, Denuvo argued that internet platforms typically collect minimal, self-reported data during standard user registration, making IP addresses potentially the only viable and reliable forensic trail leading back to the physical location of the defendant.
The company underscored to the court that, at this stage of the proceedings, it possesses little more than a pseudonym and online identifiers, leaving technical metadata as a crucial bridge to bridge the gap between digital handles and real-world accountability. Interestingly, despite earlier disclosures by Denuvo regarding cryptocurrency transactions executed by the cracker on the digital exchange FixedFloat, the platform was ultimately omitted from the final roster of subpoena targets submitted to the court.
Following a review of the modified filings, Judge Gilliam granted Denuvo’s revised motion. The approval authorizes the company to formally serve the updated subpoenas upon Discord, Valve, and Reddit, compelling them to disclose the requested identifying information. The judicial order establishes a firm deadline of November 3 for the tech platforms to produce the mandated records. Whether the resulting data will provide sufficient evidence to successfully unmask "voices38" and allow the DMCA lawsuit to proceed toward a resolution remains to be seen as the digital investigation unfolds.
Leave a Reply