Report: 13TB of Steam data leaked after users access ‘publicly accessible endpoint’
Valve has experienced a major data breach exposing approximately 13 terabytes of confidential Steam data from 2003 to 2013. The leak, dubbed the “Steam2 leak” or “teraleak,” occurred through a publicly accessible server endpoint and represents one of the largest data breaches in gaming industry history.
The compromised data consisted of Steam “depots”—file groups stored on the platform’s legacy Steam2 server infrastructure before its 2013 upgrade to the modern SteamPipes system. The leak included early versions, prototypes, and internal documentation for numerous games, both from Valve and third-party developers.
Valve titles exposed include early builds of Portal 2, Left 4 Dead 2, and notably source code and assets for the unreleased Half-Life 2: Episode 3. However, the breach extends well beyond Valve’s own productions. Third-party games affected include prototypes of major titles such as BioWare and EA’s Dragon Age: Origins, Rocksteady and WB Games’ Batman: Arkham Asylum, Mafia 2, and Grand Theft Auto 3.
Security researchers and the gaming community have highlighted the severity of this incident, with some calling it potentially the largest leak in gaming history. The exposure of unreleased game content and development assets raises concerns about intellectual property theft and the security practices of major gaming platforms. The incident underscores critical vulnerabilities in protecting confidential gaming data and has prompted discussions about data security standards within the industry.