The Steam 'Teraleak': what is really in the 12TB dump, and what fans are only hoping for

If you follow PC gaming, you have probably seen the word "Teraleak" this week, usually next to breathless claims that Valve was hacked and Half-Life 3 is inside. The reality is more interesting and a lot more careful than that. A very large archive of old Valve material really did leak, and it really does contain fascinating pieces of gaming history. But almost every dramatic version of the story gets a key detail wrong. Here is what is actually established, and what is still just fans reading tea leaves.

What the Teraleak actually is

The leak is a roughly 12TB archive (a few outlets say 13TB) of legacy Valve data that began circulating around 29 August 2026, spread over BitTorrent. Per TechSpot, the material spans roughly September 2003 to early 2013, which lines up with the era of Steam2, Valve's old content-delivery system that packaged games in older formats before the SteamPipe system replaced it in March 2013. In other words, this is a slice of Valve's back-end from more than a decade ago, not anything from the current platform. Community researchers are still cataloguing the archive, and their in-progress file count sits in the region of 387,000, a figure that will move as work continues.

Valve does not appear to have been hacked

This is the most important correction, and it changes the whole tone of the story. The prevailing account, relayed by multiple outlets, is that the data came from a publicly reachable, unauthenticated endpoint, not an intrusion into Valve's live systems. The dataminer known as Gabe Follower, whose analysis the coverage leans on, stated the leak "did not involve hacking or any other type of security incident" and that the 12TB "were obtained through publicly accessible endpoints." Valve itself has not confirmed how the data got out. On that account, someone knowledgeable simply found an old, exposed location and pulled the files.

Just as importantly, no current user, account or payment data has surfaced in the dump. The reporting so far describes it as old game assets and code, not the private information of Steam users, and the Steam2-era provenance makes user data unlikely. That sets it apart from Valve's genuine past security incidents, such as the 2011 Steam customer-database breach. Because no one appears to have broken in, the accurate word is "leak" rather than "breach," and if you are worried about your Steam account, this is not that. Valve has issued no public statement, and outlets that reached out, including Polygon, received no response.

What is genuinely in the dump

Here is the part that is actually substantiated, corroborated by multiple outlets doing hands-on datamining. According to Kotaku and GameRant, confirmed finds include:

• Portal 2 prototype builds from 2009 and 2010, one of which has working versions of scrapped mechanics like the Adhesive Gel, a Paint Gun and a bullet-time effect.
• Assets from F-Stop, the canceled camera-based Portal prequel, including placeholder Cave Johnson dialogue, though reportedly the assets only, not playable F-Stop levels.
• Left 4 Dead and Left 4 Dead 2 prototype builds, along with original maps.
• CS:GO prototype builds, at least three, with console-port icons suggesting early PS3 and Xbox 360 work.

These are the sort of finds that make a leak like this genuinely valuable to game historians, a look at how famous games were built and what got cut along the way.

The Half-Life 3 question: a model, not a build

Now the part everyone wants to be true. The excitement is that a Half-Life 2: Episode 3 build, or even Half-Life 3, is hiding in the archive. It is not, at least not on the current evidence. Kotaku is blunt: "Nobody has discovered a playable build of either Half-Life 3 or Half-Life 2: Episode 3 in this leak."

What actually exists is a single "Weaponizer" weapon model, which fans have connected to Episode 3. But GamesRadar and GameRant both stress the leap here. As GameRant puts it, the model "gives the archive a possible connection to Episode 3, but it does not establish that an Episode 3 build or dedicated depot is included in the leak." And there is a plainer explanation available: the Weaponizer model has surfaced before, in a 2011 Dota 2 beta leak and in Valve documentary footage, and Valve is known to have reused it during Portal 2's development, so its presence here may trace to that work rather than to any Episode 3 project. There are unverified reports of "ep3" filenames, but they remain exactly that, unverified. So: fans are inferring Episode 3 from a reused asset. That is speculation, not a finding.

The unreleased Scream pitch, and other unconfirmed finds

A second buzzy claim is that an unreleased multiplayer game based on the Scream horror franchise, from Vermintide studio Fatshark, was reportedly found. This one has more behind it than the Episode 3 talk, Insider Gaming reports that a dataminer shared video footage of a build timestamped around February 2011. The dataminer reads it as a pitch built to win the Scream licence rather than a greenlit project, though the timing alone does not settle that. Either way it is still fan datamining, not confirmed by Fatshark or Valve, so treat it as a strong lead rather than an established fact.

The third-party problem

There is an uncomfortable angle that is well worth flagging. The leak reaches far beyond Valve's own games. PC Gamer reports prototype builds of third-party titles such as Mafia 2 and Grand Theft Auto III, and community datamining points to others besides. Those studios had no say in this becoming public. Their unfinished, decade-old work is out there now, and if the exposed-endpoint account holds, it is because old data was left reachable rather than anything they did, a real cost that tends to get lost under the nostalgia.

What it means

For all the noise, the practical stakes are low for ordinary players and high for game preservationists and the studios involved. The leak's mere existence poses no risk to your Steam account, and nothing here is a current or upcoming product. What it is, is an unusually large window into how a decade of games were made, wrapped around a lot of wishful thinking about Half-Life. One note worth making plainly: actively downloading unknown files from a leak like this is a different matter, carrying the usual security risks on top of the legal questions around distributing copyrighted game data, so this is a story to read about rather than go hunting through. For a very different kind of pre-release leak, see our look at the GTA 6 "CyberLeek" footage, and for what is actually coming, the biggest games of 2026 and 2027.

Frequently asked questions

Was Valve or Steam hacked in the Teraleak?

No. Reporting and datamining agree the data came from a publicly reachable, unauthenticated server, not an intrusion into Valve's live systems. The Valve dataminer Gabe Follower said it "did not involve hacking or any other type of security incident." It is a leak of old data, not a breach.

Is my Steam account or payment data at risk?

No. According to the reporting, the archive contains old game build and asset data from roughly 2003 to 2013, with no current user, account or payment information having surfaced in it. This is unrelated to your live Steam account.

Is Half-Life 3 or Half-Life 2: Episode 3 in the leak?

Not on the current evidence. No playable Half-Life 3 or Episode 3 build has been found. The Episode 3 talk rests on a single reused "Weaponizer" weapon model, which has appeared before and may trace to Portal 2's development. Fans are inferring a connection that has not been established.

What has actually been confirmed in the dump?

Corroborated finds include 2009 and 2010 Portal 2 prototype builds (with scrapped mechanics), assets from the canceled Portal prequel F-Stop, Left 4 Dead and Left 4 Dead 2 prototypes, and early CS:GO builds, plus prototypes of third-party games such as Mafia 2 and Grand Theft Auto III.

What is Steam2?

Steam2 was Valve's original content-delivery and storage system, using older file formats, which was retired when the SteamPipe system took over in March 2013. The Teraleak is a slice of that old back-end, which is why its contents predate the SteamPipe switch in early 2013.

Has Valve responded or issued takedowns?

As of early September 2026, Valve had made no public statement and no legal or DMCA action against the leak had been documented. Whether Valve pursues takedowns remains an open question.