Cycurion sues to unmask and then names an anonymous Reddit/Stocktwits critic

Cycurion, Inc., a Nasdaq-listed cybersecurity company, and its chief executive Kevin Kelly filed a defamation lawsuit over pseudonymous online posts they alleged were a coordinated campaign to damage the company and its stock. The suit, brought in the U.S. District Court for the Eastern District of Virginia (Case No. 1:26-cv-00489), initially named John Doe defendants behind accounts including the Reddit username 'em2391' and a Stocktwits handle.

According to the company's own account, the pseudonymous accounts posted dozens of statements that Cycurion characterised as false and defamatory, including calling the company a 'scam,' a 'pump and dump,' and describing it in terms such as 'death spiral financing,' along with personal attacks on the CEO. The company's theory framed the posts as reputational harm and market manipulation. These are the plaintiffs' allegations; as of the events described, no court had ruled that the statements were defamatory, and the defendant had not been found liable.

The procedural significance is that the unmasking effort succeeded. Cycurion said it obtained court-authorised subpoenas to Reddit and Stocktwits and used the resulting data — together with IP, email, and geolocation information — to identify the person behind the accounts. On 7 April 2026 the company filed an amended complaint naming Michael S. Emo, of Madera, California, as the individual responsible, replacing the John Doe placeholders.

This stands in contrast to several other Reddit unmasking matters, such as the Watchtower DMCA subpoena or the Royel Otis application, in which courts refused to compel disclosure. Here the disclosure proceeded, illustrating that anonymity on Reddit is not absolute: where a plaintiff can persuade a court that a subpoena is warranted, platform records can be used to identify a previously pseudonymous poster. The case thus sits on the disclosure-granted side of the spectrum of subpoena fights.

Important caveats apply to how this case should be described. The richest source of detail is Cycurion's own press release, so the characterisation of the posts as a 'defamatory campaign' is the company's claim, not an adjudicated finding. The suit was pending, with no merits ruling and no determination that the named defendant had in fact defamed the company; the unmasking established identity, not liability. For an archive of Reddit controversies, the value of the entry is in documenting a contemporary, real example of a public company successfully using legal process against Reddit and a finance-discussion platform to pierce a critic's anonymity — while being careful to keep the defamation allegations clearly labelled as unproven.