E
Ernesto Van der Sar
The request is part of the DMCA anti-circumvention lawsuit that the Irdeto-owned company filed in September. That complaint identified the cracker only by a Discord user ID, a Reddit account and seven Steam profiles.
Denuvo wanted to subpoena Discord, Valve and Reddit, and its request wasn't limited to just names and email addresses. The proposed subpoenas also requested payment details, login logs and post/comment histories, which turned out to be a step too far for the court.
'Voluminous Data'
On October 8, Judge Haywood S. Gilliam Jr. ordered Denuvo to explain why it needs "the voluminous data contained in its requests for production" to identify and serve the defendant.
"Plaintiff's requests for production go well beyond what is needed for the limited purpose of identifying the defendant and could pose substantial privacy concerns," Judge Gilliam wrote.
Privacy concerns
The proposed subpoena to Valve was the broadest with 35 requests for the seven Steam profiles. These covered payment methods and transaction histories, IP addresses with timestamps, device identifiers, and any linked accounts.
Discord was asked to list the account's server memberships and role assignments. Reddit, meanwhile, was asked for the posts and comments by 'voices38', as well as the account's subreddit memberships.
From 46 Requests to Nine
The judge gave Denuvo the option to revise the subpoenas, using a narrow subpoena model from another case, or justify each data request in detail.
Denuvo chose the revise option. A few days ago, it filed new subpoenas that ask the platforms for targeted information.
Each request now covers documents relating to the identity or contact information of the account holder. That includes names, identification documents, email addresses, IP addresses, phone numbers, and business or residential addresses. Instead of the 46 original requests, there are now nine.
Info requested from Reddit
The new requests no longer list payment data, transaction histories, login logs, comments or posts. They do ask for IP addresses and phone numbers, which go beyond the model subpoena the judge pointed to. Denuvo argues that the platforms collect little information at sign up, and that what they collect is self reported.
The IP addresses may therefore be the only reliable path to the defendant, Denuvo writes. It also wants any name or identification document these companies have on file.
"Denuvo has only a pseudonym," the company notes.
The nine requests
| # | Platform | Target Account / Identifier | Information Demanded |
|---|---|---|---|
| 1 | Discord | User 'voices38' (ID: 1427416652684984397) | Names, ID documents, email addresses, IP addresses, phone numbers, and physical addresses |
| 2 | User 'voices38' | Names, ID documents, email addresses, IP addresses, phone numbers, and physical addresses | |
| 3 | Valve (Steam) | Profile 76561199431115733 | Names, ID documents, email addresses, IP addresses, phone numbers, and physical addresses |
| 4 | Valve (Steam) | Profile 76561198779407957 | Names, ID documents, email addresses, IP addresses, phone numbers, and physical addresses |
| 5 | Valve (Steam) | Profile 76561199886659362 | Names, ID documents, email addresses, IP addresses, phone numbers, and physical addresses |
| 6 | Valve (Steam) | Profile 76561199875355070 | Names, ID documents, email addresses, IP addresses, phone numbers, and physical addresses |
| 7 | Valve (Steam) | Profile 76561199872834766 | Names, ID documents, email addresses, IP addresses, phone numbers, and physical addresses |
| 8 | Valve (Steam) | Profile 76561198730942620 | Names, ID documents, email addresses, IP addresses, phone numbers, and physical addresses |
| 9 | Valve (Steam) | Profile 76561198735927271 | Names, ID documents, email addresses, IP addresses, phone numbers, and physical addresses |
The crypto platform FixedFloat isn't on the list of subpoena targets. Denuvo previously said that it found cryptocurrency transactions by the cracker on the crypto exchange, but it hasn't asked the court for permission to subpoena the platform.
Subpoenas Granted
After reviewing the new request, Judge Gilliam granted the motion. This means that Denuvo can now serve Discord, Valve and Reddit with the revised subpoenas, to identify the defendant and serve the lawsuit.
The subpoenas set November 3 as the deadline for the platforms to produce the requested information. Whether that will be enough to put a name to 'voices38' has yet to be seen.
—
A copy of Judge Gilliam's order to show cause is available here (pdf). Denuvo's response, with the revised subpoenas, can be found here (pdf), and the order granting the motion is available here (pdf).
From: TF, for the latest news on copyright battles, piracy and more.
