Denuvo wins court order to unmask crack developer voices38 across platforms

The judge questioned why such an expansive dataset was necessary
A federal judge rejected Denuvo's initial 46-point data request as excessive privacy risk.
Mark

So Denuvo got a court order to find out who this person is. What exactly did they want to know at first?

Mimi

They asked for 46 different data points. Payment methods, IP addresses, device IDs, login logs, everything. They wanted to see not just who the person is, but how they move through the internet.

Luke

Forty-six seems like a lot. Did they explain why they needed all of that just to identify someone?

Mimi

They didn't really get the chance. The judge looked at it and said it was too much—too much privacy risk for what should be a simple identification.

Mark

And then what happened?

Mimi

Denuvo backed down. They cut it down to nine requests. Just basic stuff: name, email, address, IP address, phone number. No payment history, no posts, no login logs.

Luke

So the judge basically forced them to be more reasonable.

Mimi

Right. The judge said the original requests went beyond what was necessary.

Mark

Does this mean voices38 is definitely going to be identified?

Luke

Not necessarily. The platforms could still challenge it, or the developer could fight it. We don't know what happens on November 3 yet.

Mimi

True. But if the platforms comply, then yes—Denuvo will know who they're suing.

Mark

And then the real case begins.

Mimi

Exactly. This is just the discovery phase. The actual litigation about whether voices38 broke the law—that's still ahead.

  • A pseudonymous developer who cracked one of gaming's most prominent anti-piracy systems now faces a court-authorized effort to strip away their anonymity entirely.
  • Denuvo's initial discovery demands were so expansive — 46 data points spanning payment histories, device identifiers, and full post archives — that the presiding judge rejected them as a disproportionate invasion of privacy.
  • Forced to recalibrate, Denuvo narrowed its subpoenas to 9 basic identifiers: names, emails, IP addresses, phone numbers, and physical addresses — the minimum skeleton needed to locate a human being.
  • Discord, Valve, and Reddit now face a November 3 deadline to comply, placing major platforms at the crossroads of legal obligation and their users' expectation of protected anonymity.
  • If voices38 is successfully unmasked, the case advances into full copyright litigation; if platforms resist or the developer contests disclosure, the durability of online anonymity against determined legal pressure remains an open and urgent question.

In the quiet corridors where digital anonymity meets the long arm of copyright law, a federal court has authorized Denuvo to pierce the pseudonymous veil of a software cracker known only as voices38. Through subpoenas issued to Discord, Valve, and Reddit, the company seeks to transform an online shadow into a named defendant — a pursuit that forces platforms, courts, and society to reckon with how much of ourselves we are permitted to keep hidden when our actions disturb the interests of powerful institutions. The judge's decision to trim Denuvo's sweeping 46-point data request down to 9 essential identifiers suggests that even in the service of legitimate enforcement, the law is beginning to draw a line between finding a person and mapping their entire existence.

A federal judge has authorized Denuvo to subpoena Discord, Valve, and Reddit in pursuit of voices38, a pseudonymous developer accused of cracking the company's anti-piracy software. The legal action, filed by Denuvo's parent company Irdeto in September 2026, alleges violations of the Digital Millennium Copyright Act — specifically, the circumvention of technical protections on copyrighted material. Because voices38 operates entirely under a pseudonym, identifying the person behind the accounts became a prerequisite to the lawsuit itself.

Denuvo's opening discovery request was ambitious to the point of overreach. The company sought 46 separate data points across the three platforms, including payment histories, device identifiers, server memberships, and complete post and comment archives. The scope suggested Denuvo wanted not merely to identify voices38, but to reconstruct their entire digital life. The judge pushed back on October 8, finding the requests excessive relative to the narrow goal of identifying a defendant, and signaling that privacy interests could not simply be swept aside.

Rather than argue for each data point, Denuvo retreated to essentials. The revised subpoenas request only nine categories of basic identifying information — names, email addresses, IP addresses, phone numbers, and physical addresses — stripping away financial records, behavioral logs, and user-generated content. What remains is the minimum architecture of identity: enough to find and contact a person, but not enough to surveil them.

The platforms must respond by November 3. Their choices — compliance, negotiation, or legal challenge — will determine whether voices38 is unmasked and whether the case proceeds to its substantive phase. More broadly, the episode has become a small but telling test of how courts will referee the collision between copyright enforcement and the fragile promise of anonymity in digital spaces.

A federal judge has authorized Denuvo to unmask the identity of voices38, a pseudonymous software developer who cracked the company's anti-piracy protection system. The court granted permission to issue subpoenas to Discord, Valve, and Reddit—three of the largest platforms where the developer maintains accounts—forcing each to disclose identifying information by November 3, 2026.

The legal action stems from a lawsuit filed by Irdeto, Denuvo's parent company, in September 2026. The suit alleges violation of the Digital Millennium Copyright Act, which prohibits circumventing technical measures designed to protect copyrighted material. Because the defendant operates entirely under a pseudonym, Denuvo needed the platforms to reveal who voices38 actually is. In its initial filing, the company identified seven Steam profiles, along with Discord and Reddit accounts believed to belong to the same person.

Denuvo's first attempt at discovery was sweeping. The company requested 46 separate data points from the three platforms. Valve was asked to surrender payment methods, purchase history, IP addresses with timestamps, device identifiers, and any accounts linked to the suspect profiles. Discord was to provide information about servers the user had joined. Reddit was to turn over the complete post and comment history. The scope reflected how thoroughly Denuvo wanted to document not just who voices38 is, but how they operate across the internet.

On October 8, the judge intervened. He questioned why such an expansive dataset was necessary merely to identify a defendant. In his view, the original requests created substantial privacy risks that went well beyond what the case required. Rather than defend each individual data point, Denuvo chose to revise its approach. The company narrowed the subpoenas significantly, reducing the total requests from 46 to 9.

The revised demands are far more limited. Denuvo now seeks only basic identifying information: first and last names, identification documents if available, email addresses, IP addresses, phone numbers, and home and work addresses. The company removed requests for payment and transaction data, account login logs, and user-generated content. What remains is essentially the skeleton of identity—the information needed to locate and contact a person, but not to map their digital behavior or financial footprint.

This middle ground reflects a tension that has become familiar in digital-age litigation. Copyright holders argue they need robust tools to enforce their rights and identify infringers. Platform users and privacy advocates counter that broad data requests can expose innocent people to harassment, enable surveillance, and normalize the erosion of anonymity online. The judge's intervention suggests courts are beginning to police that boundary more carefully, at least when the initial requests appear excessive.

The platforms now have until November 3 to comply. How they respond—whether they challenge the subpoenas, negotiate the scope, or simply hand over the data—will shape what happens next. If Denuvo successfully identifies voices38, the case moves into the substantive phase of litigation. If the platforms resist or the developer contests the disclosure, the question of whether anonymity can survive a determined copyright holder's legal machinery will remain unsettled.

The initial requests went beyond what was necessary and could create significant risks to user privacy
— Federal judge, October 8 ruling
Quieres la nota completa? Lee el original en iXBT.games ↗
Contáctanos FAQ