Axel Gembe and the Half-Life 2 leak of 2003

Half-Life 2 came out for Windows on November 16, 2004. Thirteen months before that, the Source engine code and an unfinished build of the game were already on the internet. A German programmer named Axel Gembe had taken them from Valve's own network through an account called "build" with no password on it.

Valve was already late when the code walked out

Half-Life 2 was announced at E3 2003 for September 30 of that year. On September 23 Valve moved the target to the holiday season, and fans took it badly. Newell later put it in three words: "We were paralyzed."

Gembe had been circling Valve for a while by then. He first thought about breaking in back in 2002, hoping to learn more about the sequel. On September 19, 2003, he downloaded the unfinished game code. The Source engine code reached the internet on October 2, and the game itself followed on October 7. The same day the engine code appeared, Newell acknowledged the hack in public and asked fans to help find who did it.

Kotaku called it a disaster for Valve and says the game slipped by months. The leaks damaged morale at Valve and slowed development. Fans compiled the files into a playable version that showed how unfinished the game still was.

How Axel Gembe got in

Valve's name server allowed anonymous zone transfers, which handed Gembe the names of its subdomains. A port scan then turned up a server in Valve's address range that belonged to Tangis, a wearable-computing company managed by Dan Newell, Gabe Newell's brother. Valve had not firewalled that machine off from its internal network.

Inside, Gembe found a Primary Domain Controller with the "build" account and its blank password. After that he cracked the other passwords quickly. He read design documents and notes before he found the development trunk of the game. Nobody at Valve noticed him for weeks. When the game would not run on his machine, he edited the code until a basic version did.

Valve later found keystroke recorders on Newell's computer and several others. The Register traces the breach to a compromised email account belonging to Newell.

By Gembe's own account, he shared the build with a friend, who put it online in early October.

Play

The leaked build was a different game

The leaked build had an interface copied from the Steam version of the first Half-Life. Its OpenGL and Software renderer options did nothing. The finished Source engine used only DirectX. Multiplayer was minimal, and the "Create a server" menu had a tab called "CPU Players." DirectX 6 support was basic, with a few low-poly character models and a DirectX 6 version of one Coast map. There was no built-in anti-aliasing, and the engine ran slower than the final one.

The build split ammunition into small, medium and heavy types: small for the SMG2, heavy for the HMG1, and medium for everything from the pistol to the AR2. A separate pack of maps from different stages of production leaked alongside the build.

The FBI's job interview, and why it failed

Gembe was 20 when he broke in and 21 by the time of the sting. He emailed Newell, confessed and asked for a job. A phone interview of 40 minutes followed. Valve then invited him to Seattle for an in-person interview, the start of an FBI sting operation. Gembe later explained the job request this way: "I was very naive back then."

Gembe declined the invitation and stayed in Germany. On the morning of May 7, 2004, German police came to his home. In November 2006 a court gave him two years of probation. A law firm quoted by SVG estimated he could have faced up to 10 years in federal prison.

In October 2008 the US indicted him in a separate case, over the original Agobot botnet client that others used to attack a rival satellite TV retailer. The Register wrote that it was unclear whether US authorities would seek extradition.

In 2011 Eurogamer interviewed him under the title "The Boy Who Stole Half-Life 2." Kotaku's write-up of it quotes his apology to Valve: "I am so very sorry for what I did to you." He also said, "You are my favorite developer, and I will always buy your games."

The leak did not sink the game

Half-Life 2 sold 6.5 million retail copies by December 2008, not counting Steam. Forbes put worldwide sales at 12 million by February 2011.

The Steam page lists it at $9.99 in the US store as of October 23, 2026, and it has a free demo. Both the disc and Steam versions need Steam installed and running. The game later reached Xbox in 2005, the Xbox 360 and PlayStation 3 in 2007 through The Orange Box, Mac in 2010 and Linux in 2013.

Questions people ask

What happened to the Half-Life 2 leaker?

German police arrested Axel Gembe on May 7, 2004, after he turned down the trip to Seattle for the fake job interview. A German court sentenced him to two years of probation in November 2006. The US later indicted him over the Agobot botnet.

What game source code has been leaked?

The Half-Life 2 code in 2003 is the best known case. The Combine OverWiki also lists later Valve leaks: internal repositories in January 2023, a roughly 13 TB archive from the Steam2 content server on August 29, 2026 that held early Portal 2 builds, and the source for the F-Stop experiments on September 25, 2026.

Is Half-Life 2 OK for 12 year olds?

The ESRB rates it M for Mature 17+, for blood and gore and intense violence.

Is the Half-Life 2 source code on GitHub?

Part of it is, legally. Valve's Source SDK 2013 repository contains the game code for Half-Life 2, Half-Life 2: Deathmatch and Team Fortress 2 under a non-commercial license, so people can build mods with it.

What is Axel Gembe doing now?

Gembe finished an apprenticeship between his arrest and his trial and went on to work in database and server security.