Valve's Steam2 leak exposes 12TB of unreleased game prototypes
This past weekend, an "as-complete-as-possible" dump of Valve's discontinued Steam2 content-distribution servers began circulating on a BitTorrent tracker the leak's reporters say Valve is unlikely to ever fully purge from the internet. The trove totals more than 12TB and spans games uploaded to Steam between 2003 and 2013, before Valve retired Steam2. It reportedly includes thousands of "depots," covering seemingly every version of every title that passed through those old servers.
Beyond the public release builds already familiar to players, the dump reportedly contains previously unseen pre-release, prototype and playtest versions of games published by Valve and by third-party Steam publishers. Some of that material had been treated as lost by archivists: early, pre-2013 versions of certain games were no longer available from Valve and survived, where they survived at all, only as local copies on aging machines.
The leaked material cuts off abruptly at 2013 because that is when Valve replaced Steam2 with SteamPipe, its current distribution system. The switch moved Valve from a proprietary file-distribution format to standard HTTP file trees and changed updates so they transfer only file differentials rather than full downloads each time.
Two people who track Valve closely addressed how the material got out, though neither is Valve itself. Data miner Gabe Follower said on social media that he had verified everything in the "Steam2 Teraleak" was obtained through a publicly accessible API endpoint, calling it Valve's fault. Spanish-language Valve streamer and analyst Scolcer said, in comments relayed via machine translation, that the dump came from a site that was "100% accessible to the public": no passwords, no protection of any kind.
Key facts
- More than 12TB of Steam2-era content, covering games from 2003 to 2013, began circulating via BitTorrent this past weekend.
- The dump reportedly includes previously unseen pre-release, prototype and playtest builds from Valve and third-party publishers, alongside already-public release builds.
- Data miner Gabe Follower said he verified the material was obtained through a publicly accessible API endpoint that Valve had left exposed.
- Streamer and analyst Scolcer said the source site required no password and had no protection at all.
- The leak's cutoff at 2013 matches when Valve replaced Steam2 with its current SteamPipe distribution system.
Why it matters
More than a decade of PC gaming history that archivists had written off as lost is apparently intact and now circulating publicly. The dump covers the Steam2 era, 2003 to 2013, before Valve moved to SteamPipe, and reportedly includes pre-release, prototype and playtest builds alongside the public versions players already had access to. For game preservation, that is a large recovery of material Valve itself no longer serves anywhere.
Who it affects
Valve and every third-party publisher whose Steam2-era builds sat on those servers are affected, since prototype and pre-release code for their games is now circulating outside their control. Game historians, archivists and preservation projects gain a large new source of material to work from. Valve also faces a security question: how a decade-old backend endpoint stayed reachable long enough for someone to pull more than 12TB from it.
How to use it
The dump is circulating as a BitTorrent release via a tracker the reporting describes as effectively unremovable. Anyone drawing on it should treat it as leaked material of uncertain legal status rather than an official archive, and should be cautious with content taken from unreleased prototype and playtest builds that publishers never intended to make public.
How solid is it
The claim that the data is genuine and came from an exposed public endpoint rests on statements from two people who track Valve closely, data miner Gabe Follower and streamer and analyst Scolcer, not on confirmation from Valve itself. Both independently describe the source as unprotected and publicly reachable, which lines up with how leaks of this kind typically surface, but no Valve statement addressing the leak is reported.
Risks and caveats
The account here comes from third parties, not from Valve: no total count of games, depots or files is given beyond "thousands" of depots, no exact date beyond "this weekend" is reported, and neither who assembled the leak nor how the endpoint was found is disclosed. Anyone downloading the torrent pulls in prototype and unreleased material from many publishers at once, which raises its own legal and ethical questions on top of the leak itself.
“verified that everything in Steam2 Teraleak was obtained via a publicly accessible [API] endpoint. It's Valve's fault”
— Gabe Follower, data miner and Valve watcher