Valve company accidentally exposed over 12 terabytes of internal Steam files. Third parties gained access to this material following a service error by the company itself, which made available data for all games uploaded to the platform between 2003 and 2013.
Part of the platform's internal infrastructure became accessible on the internet, allowing the community to extract the files completely before the error was fixed. As reported by Polygon, the leak revealed both cancelled projects from the Half-Life and Portal franchises, as well as early versions of games from other developers.
The initial findings demonstrate the evolution of classic concepts, paying special attention to Valve's internal projects. For example, Half-Life 2: Episode 3, which was announced in 2006 and subsequently cancelled, contained maps set in the Arctic and freezing weaponry.
Furthermore, the documents show early tests of the 'Weaponizer' tool, which was developed for the game and allowed environmental elements to be turned into ammunition. The leak also uncovered a beta version of Portal 2 from July 2009, a build of Left 4 Dead from June 2008, and documentation on the origin of Counter-Strike: Global Offensive (CS:GO), detailing its initial stage before enhancements from partner Hidden Path Entertainment and its release as an independent title.
In addition to its own catalog, the server stored directories of partner studios. The community managed to run beta versions of Sonic 4 Episode 2 and find developments for games such as Call of Duty, Resident Evil, Mirror’s Edge, Batman: Arkham Asylum, Dragon Age: Origins, and Spore.
Unlike traditional security breaches, this leak was not the result of a complex hacking attack. The problem arose due to a service error by Valve itself, which left a previously used data storage server accessible.
The material corresponds to the era of the Steam2 system, when the platform distributed games to consumers in proprietary formats such as NCF (No-Cache File) and GCF (Grid Cache File). The use of this technology preceded the company's migration to the current standard HTTP file system (SteamPipe), implemented around March 2013.
Despite the scale of the leak, the financial impact on Valve is likely to be limited. Steam earned over $11 billion in the global market (approximately 60.5 billion reales at direct conversion) in the first half of 2026 alone. However, since the exposed material is extensive, new data may appear to the public in the coming days.