News
Nobody hacked Valve. That is the part most coverage is burying, and it is the most important detail in the story.
Around 12 terabytes of Valve internal development data began circulating on August 29, 2026. The community has named it the Steam2 Teraleak. It spans Steam depot uploads from 2003 to 2013, and it did not come from a breach.
It was sitting on a publicly reachable server. As researcher Scolcer put it: “There has been no hacking. This is 100% Valve fault. The Steam Teraleak was obtained from a site that was 100% accessible to the public. It was there for everyone to download. No passwords. Nothing.”
What is actually in it
Dataminer GabeFollower first flagged the archive, and researchers have since verified a substantial amount. Confirmed so far:
- Portal 2 development and beta builds, including cut dialogue, alternate opening material and different GLaDOS sequences
- F-Stop — a build of the cancelled Portal prequel
- Left 4 Dead cut assets
- Counter-Strike: Global Offensive internal content
- The Weaponizer — a weapon model long speculated to belong to Half-Life 2: Episode Three
- Beta files for Sonic the Hedgehog 4: Episode II
It reaches well beyond Valve own catalogue. Because the archive mirrors everything uploaded to Steam in that decade, third-party material has surfaced too, with reports of early builds from Call of Duty, Fallout, Civilization, Resident Evil, Mirror’s Edge, Batman: Arkham Asylum and Dragon Age.
The part everyone is getting wrong
Half-Life 2: Episode Three is why this story travelled so fast. It is one of gaming longest-running unfinished stories, and any mention of it functions as a dinner bell.
So it is worth being blunt: despite days of digging, nobody has found a complete, playable Episode Three build. Nobody has found confirmation of Half-Life 3 either.
What exists is a weapon model associated with the project. That is a genuinely interesting artefact and it is not a game. Headlines implying otherwise are running ahead of the evidence.
How this happened
The files came from Steam2, Valve legacy content-delivery system, which was replaced by SteamPipe back in 2013. The archive effectively functions as a time capsule of how Steam worked before the modern infrastructure existed.
An old system nobody was watching, left reachable without authentication, holding a decade of build history. That is a very ordinary kind of failure, and it is the reason other publishers are reportedly now auditing their own legacy infrastructure.
How it compares to previous Valve leaks
- 2003: the Half-Life 2 source code theft — a targeted hack of one active project
- 2018: partial Team Fortress 2 and CS:GO source leaks — small and contained
- 2026: a decade of build infrastructure across dozens of projects, exposed through an open server
The difference is not just size. The first two were thefts. This one was an absence of a password.
Should you download it? No.
Two straightforward reasons, and neither is moralising.
It is still copyrighted
The files remain Valve property regardless of how they became public. Downloading, redistributing or building projects from them carries real legal risk, and that applies to modders considering using the assets.
You do not know what you are downloading
Mirrors are circulating through torrent trackers and Discord servers with no verification. Large, heavily-shared archives of unverified files are exactly the distribution channel malware prefers.
If you are curious about the contents, read the dataminer findings. That is where the interesting information is anyway.
Why this matters beyond the Half-Life speculation
Strip away the Episode Three excitement and what is left is a preservation story.
Cut Portal 2 dialogue, alternate GLaDOS sequences, a playable build of a cancelled Portal prequel — this is development history that would otherwise have been lost entirely. Studios rarely publish it, and when infrastructure is retired it usually vanishes with the system.
That is the genuinely uncomfortable tension here. The material has obvious historical value, and the only reason anyone can see it is a security failure. Corporate archives and public preservation are not the same thing, and this leak is a fairly stark demonstration of the gap between them.
Valve has not commented.
Frequently asked questions
What is the Steam2 Teraleak?
A roughly 12TB archive of Valve internal development files pulled from Steam2, the company legacy content-delivery system used between 2003 and 2013. It began circulating on August 29, 2026.
Was Valve hacked?
No. Researchers report the archive was on a publicly accessible server with no password or authentication required. It was an exposed legacy endpoint rather than a breach.
Does the leak contain Half-Life 3?
No. Researchers found a weapon model known as the Weaponizer associated with the cancelled Half-Life 2: Episode Three, but no playable Episode Three build and no confirmation of Half-Life 3 has been found.
What games are in the Steam leak?
Confirmed Valve content includes Portal 2 builds, the cancelled Portal prequel F-Stop, Left 4 Dead and CS:GO assets. Third-party material reportedly includes early builds from Call of Duty, Fallout, Civilization, Resident Evil, Mirror’s Edge, Batman: Arkham Asylum and Dragon Age.
Is it legal to download the Steam leak?
The files remain Valve copyrighted property regardless of how they became public, so downloading, redistributing or building projects from them carries legal risk. Unverified mirrors also present a malware risk.
Has Valve responded to the leak?
Valve has not commented publicly or authenticated the archive contents.
For more Valve and Steam coverage, see our guide to what Steam services have actually shut down and our directory of Steam data tools.
