Years of Valve data was available to public in plain sight.
Dataminer Gabe Follower flagged the entire archive on 29 August.
"No hacking involved, just verified that everything in Steam2 Teraleak was obtained via a publicly accessible endpoint. It's Valve's fault," he stated. "The Steam Teraleak was obtained from a site that was 100% accessible to the public. It was there for everyone to download. No passwords. Nothing. Hidden in plain sight, but with no protection whatsoever."
It looks like Valve forgot about years of data.
Why it stops at 2013
So why is it like this?
Steam2 was Valve's content delivery system, using GCF and NCF file formats to introduce games before the company migrated to SteamPipe in March 2013.
That migration date is the launch of SteamPipe. Everything sitting in the old system at the point of transition apparently just left there, on an endpoint nobody secured, for thirteen years.
Some labeled it as Teraleak.
The part nobody's leading with
These were Steam depot uploads, not Valve-internal archives. The exposure covers hundreds of games from developers, old titles but still.
Third-party material reported in the archive includes beta files even from Sega. Any studio that shipped through Steam between 2003 and 2013 potentially has old builds in there, the leakers will go through them.
Exposing a decade of other people's unreleased builds because you left a server open is a big problem, some of these companies may seek compensation.
Valve's response
Valve did not confirm of the archive, no authentication of its contents, no statement on the access control failure.
Gabe Follower says it will take probably weeks at minimum for the community to work through 12TB, so what's actually in it remains partly unestablished. Nothing has been confirmed by Valve and we will watch the leak.
More:Valve Sued Again in UK
Read
Source Editing
Visual Editing
Related news
