Steam Suffers Massive 12TB Data Leak, Exposing Unreleased Games and Early Builds
Valve has confirmed a major security breach after over 12 terabytes of internal Steam data including unreleased games, betas, and demos were leaked online. The breach spans a decade of content, covering all uploads to the platform between 2003 and 2013.
Among the exposed files are early builds of high-profile titles such as Portal 2, Left 4 Dead, Counter-Strike: Global Offensive, and preliminary assets for Half-Life 2: Episode 3. The leak also includes unreleased or scrapped projects that were never made public.
The breach did not result from a targeted cyberattack but rather from publicly accessible, unsecured links maintained by Valve. The oversight raises concerns about potential additional vulnerabilities, including the possibility of unencrypted directories containing user personal data. The incident has sparked unease among developers relying on Steam’s infrastructure, highlighting broader security risks within the platform.
Valve corporation cybersecurity rating report: https://www.rankiteo.com/company/valve-corporation
"id": "VAL1788172335",
"linkid": "valve-corporation",
"type": "Breach",
"date": "1/2013",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Developers relying on Steam’s '
'infrastructure',
'industry': 'Video Game Development and Digital '
'Distribution',
'name': 'Valve',
'type': 'Company'}],
'attack_vector': 'Unsecured Public Links',
'data_breach': {'data_encryption': 'Potential unencrypted directories',
'personally_identifiable_information': 'Potential (user '
'personal data)',
'sensitivity_of_data': 'High (internal, unreleased content)',
'type_of_data_compromised': ['Unreleased games',
'Betas',
'Demos',
'Early builds',
'Preliminary assets',
'Unreleased or scrapped '
'projects']},
'description': 'Valve has confirmed a major security breach after over 12 '
'terabytes of internal Steam data including unreleased games, '
'betas, and demos were leaked online. The breach spans a '
'decade of content, covering all uploads to the platform '
'between 2003 and 2013. Among the exposed files are early '
'builds of high-profile titles such as Portal 2, Left 4 Dead, '
'Counter-Strike: Global Offensive, and preliminary assets for '
'Half-Life 2: Episode 3. The leak also includes unreleased or '
'scrapped projects that were never made public. The breach did '
'not result from a targeted cyberattack but rather from '
'publicly accessible, unsecured links maintained by Valve. The '
'oversight raises concerns about potential additional '
'vulnerabilities, including the possibility of unencrypted '
'directories containing user personal data.',
'impact': {'brand_reputation_impact': 'Sparked unease among developers',
'data_compromised': '12TB of internal data',
'identity_theft_risk': 'Potential risk due to possibility of '
'unencrypted directories containing user '
'personal data',
'operational_impact': 'Concerns about broader security risks '
'within the platform',
'systems_affected': 'Steam platform'},
'post_incident_analysis': {'root_causes': 'Publicly accessible, unsecured '
'links maintained by Valve'},
'title': 'Steam Suffers Massive 12TB Data Leak, Exposing Unreleased Games and '
'Early Builds',
'type': 'Data Leak',
'vulnerability_exploited': 'Publicly accessible, unsecured links'}