Steam2 Teraleak: 13TB of Old Valve Files Leaked From an Open, Unsecured Server

Somebody found an open server belonging to a thirty-year-old Valve, with no password and no protection of any kind, and pulled 13 terabytes of PC gaming history off it. Inside sits an early Counter-Strike: Global Offensive build, previously unseen Portal 2 material, a weapon model tied to Half-Life 2: Episode 3 for over a decade, and prototypes of games Valve never even shipped. Over the weekend of August 29-31, the community named it the "Steam2 Teraleak." Three days later, Valve still hasn't said a word about it.

A forgotten open server, not a hack

The "Steam2" name refers to Steam's old server infrastructure, from before the switch to the modern SteamPipe system in 2013. The data spans 2003 to 2013 and, according to a dataminer known as Gabe Follower, reached the community without any hacking at all. It was simply pulled from a publicly accessible endpoint that required neither a password nor authorization. In other words: somebody forgot to lock the door to a warehouse holding a decade of unreleased material.

Worth separating this immediately from something else entirely. A separate, earlier incident involving 89 million Steam accounts and leaked 2FA codes through a third-party SMS provider is a different story, with a different source and a different scope. The teraleak has nothing to do with passwords, payments or account data. It's a leak of development files, not user data.

What's actually sitting inside those thirteen terabytes

The archive's contents are a mix of shipped builds and material never meant to see daylight. There's an early version of Left 4 Dead, a Portal 2 beta, an early Counter-Strike: Global Offensive build from before launch. There's also F-Stop, a cancelled photography-based puzzle game whose existence was previously known to only a handful of archivists.

The loudest attention went to material tied to Half-Life 2: Episode 3. Files turned up a weapon model known as the "Weaponizer," associated with the cancelled episode for years, alongside data and assets referencing other abandoned ideas, including an ice gun. Some caution is warranted here: the "Weaponizer" already surfaced once before, as a placeholder inside Portal 2's files, so its appearance in this leak proves the asset resurfaced again. It proves nothing about a playable Episode 3 build existing anywhere.

A less hyped but substantively richer find is a build dated July 2009, tied to a structure called Core Hub that Valve ultimately scrapped. It uses Team Fortress 2 character arms and leftover Half-Life 2 zombie models as placeholders, contains an unreleased pre-rendered intro sequence, and a version of GLaDOS with different dialogue lines and different animation work, including a previously unseen version of her wake-up sequence.

The leak's scope reaches well beyond Valve itself. The archive contains prototypes of third-party titles that were stored on Steam's old infrastructure, including early material tied to Mafia 2 and Grand Theft Auto 3. One researcher going through the data called it potentially one of the biggest leaks in the industry's history, if not the biggest.

Valve's silence

On the teraleak itself, as opposed to the unrelated 2FA case, Valve has issued no statement whatsoever. The company hasn't confirmed the material is genuine, hasn't said how long the endpoint sat exposed, and hasn't said whether it would have noticed at all without the archivist community stepping in. This isn't new behavior from Valve: the company only admitted the VACnet flaw after the problem had been visible to players for over a year, and only once denying it further stopped being worth the cost. Three days of silence on a leak this size is itself worth noting, regardless of what ultimately turns up in the files.