Steam Data Breach Exposes Over 12TB of Source Code, Unreleased Projects

A major security incident has shaken the global gaming and technology sectors, with confirmed reports of a large-scale data leak involving proprietary databases and source code belonging to Valve Corporation, operator of the Steam gaming platform. The compromised data exceeds 12 terabytes in volume and includes internal documentation and source code for games developed over multiple years.

Source code for major titles and an exposed cloud API

The sensitive files were circulated through public repositories on GitHub. According to a report published by Engadget, this breach ranks among the largest data disclosures in the history of the digital entertainment industry. The leaked material contains details on unreleased projects and comprehensive technical information related to globally recognized game franchises, including Call of Duty and Fallout.

Technical analysis indicates the breach originated from exploitation of an outdated, publicly accessible application programming interface (API) tied to Valve’s legacy cloud storage system—prior to its subsequent update. This development underscores growing risks associated with aging cloud storage interfaces and prompts urgent reassessment across the gaming industry regarding archival server security and intellectual property protection for source code.

Steps to safeguard intellectual property and data

Digital security teams are actively tracing the origins of the file uploads and working to close any remaining vulnerabilities that could enable further unauthorized disclosures. These stringent measures aim to strengthen protections for creative development projects and uphold software confidentiality across global platforms.