Valve Corporation

Profile narrative

Valve Corporation is an American video game developer and digital distribution company that creates and publishes well‑known game franchises including Half‑Life, Portal, Team Fortress, Counter‑Strike, and Dota 2. It operates the Steam platform, a digital storefront for PC gaming that facilitates game sales, automatic updates, community features, and the distribution of associated hardware such as controllers and virtual reality devices. Steam also supports user‑generated content through services like Steam Workshop and historically through the Steam Greenlight program, which allowed developers to submit game concepts for community voting. In addition to software distribution, Valve organizes and sponsors esports competitions, most notably the annual Dota 2 tournament known as The International, which features multi‑million dollar prize pools. Through these combined activities Valve serves a worldwide audience of players, developers, and content creators who rely on its ecosystem for game access, creation, and competitive play.

Valve’s headquarters are situated in the United States of America, and the scope of its operations is evident from the repeated targeting of its services in cyber incidents. In 2026 a breach at its European logistics partner CEVA Logistics exposed the names, addresses, phone numbers, email addresses, and order details of Steam hardware buyers while payment data remained secure, disrupting operations at eight of CEVA’s European warehouses and prompting warnings about possible phishing attempts. A 2018 source code leak revealed the internal code for Team Fortress 2 and Counter‑Strike: Global Offensive, originating from a depot previously shared with Source engine licensees and raising concerns about potential cheat development and malware distribution. Also in 2018 Valve was compromised in a cyber espionage campaign involving Winnti malware linked to Chinese state‑sponsored actors, which used phishing emails to gain persistent access for data exfiltration. The platform has faced multiple distributed denial‑of‑service attacks, including disruptions to Steam and Origin servers in 2016 claimed by Phantom Squad and PoodleCorp, a 2015 DDoS attack that halted a high‑profile Dota 2 tournament with an $18 million prize pool, and earlier 2014 incidents tied to the DERP Trolling group that affected Steam, Origin, Battle.net, and League of Legends. Malicious actors have also exploited Steam’s community systems, such as the 2015 Steam Greenlight abuse where cloned game pages distributed trojan links, and the 2014 deployment of Trojan.SteamBurglar.1 that harvested in‑game items via fraudulent trade messages. Finally, in 2011 a hacking group infiltrated Valve’s Steam platform alongside Microsoft and the US Army using SQL injections and stolen credentials to steal unreleased games, source code, and financial data valued between $100 million and $200 million. These incidents collectively illustrate Valve’s prominent role in the gaming industry and the attractiveness of its infrastructure to a range of threat actors seeking to exploit user data, disrupt services, or gain access to proprietary assets.

Incidents

10 incidents linked to this organisation.