Forza Horizon 6 Steam Leak: Unencrypted Build Lets Pirates Play a Week Early
In what is shaping up to be one of the biggest pre-release security breaches in recent gaming history, Forza Horizon 6, the highly anticipated open-world racer from Playground Games, has been leaked in full on Steam. According to multiple reports published on May 10 and May 11, 2026, an unencrypted 155 GB build of the game was accidentally uploaded to Valve’s platform, making it accessible for download ahead of its official May 19 release date.
The leak was first noticed by users on piracy-focused forums and subreddits, where community members quickly realized that the uploaded files were not protected by Steam’s usual encryption layer. Within hours, several users shared screenshots and video clips of the game running on their systems, confirming that the leaked build is not only complete but also playable. The crack, facilitated by the absence of strong DRM, reportedly took only a few hours to develop.
This incident marks the second major Steam preload mishap in 2026, following a similar leak of Death Stranding 2 in March, when approximately 113 GB of unencrypted files were mistakenly published days before its launch. The Forza Horizon 6 leak, however, is larger in scale and carries higher stakes given the franchise’s massive fanbase and commercial weight.
The Leak: How It Happened and What’s at Stake
Unencrypted Upload: A Costly Human Error
The source of the leak appears to be a critical oversight during the game’s preload preparation. Typically, developers upload an encrypted version of a game to Steam a few days before launch, allowing legitimate purchasers to download the files in advance. The encryption ensures that the game remains unplayable until the official release time. In this case, Playground Games reportedly uploaded an unencrypted version of Forza Horizon 6 Premium Edition, leaving the door open for anyone to access and redistribute the full game.
As noted by Insider Gaming, the files were posted to Steam ten days before the global launch. The oversight was quickly exploited by users on the CrackWatch subreddit, where a post highlighted that the entire 155 GB package could be downloaded from various file-sharing sites. The same report noted that “the more daring users on the platform shared screenshots of the game running, allegedly on the files procured from the leaked build,” and one user even posted a short gameplay video to YouTube.
Immediate Impact: Pirates Already Playing
By May 11, several independent tech and gaming news outlets confirmed that the leaked build is fully functional. DSOGaming reported that both Forza Horizon 6 and the horror title Directive 8020 were “leaked and cracked before release,” with the former being playable in offline mode. The article attributed the ease of cracking to the lack of third-party DRM beyond Steam’s own, which is notoriously easy to bypass.
The leak poses a significant financial risk to Microsoft and Playground Games. Piracy, while often overstated in its impact, can meaningfully dent first-week sales, especially when a game is available for free days before its official launch. For a title that reportedly features over 550 licensed vehicles and the largest map in series history—including a fictionalized version of Japan—the loss of early revenue could be substantial.
Developer and Publisher Silence
As of press time, neither Playground Games nor Microsoft has issued an official statement regarding the breach. Several outlets, including Insider Gaming, have reached out for comment but have not yet received a response. The lack of communication has fueled speculation about the severity of the leak and whether any legal action is being prepared against those who shared or cracked the files.
Context: A Pattern of Pre-Release Leaks on Steam
Death Stranding 2 Set a Precedent
This is not an isolated incident. The same mechanism—an unencrypted Steam upload—was responsible for the Death Stranding 2 leak in March 2026. In that case, nearly 113 GB of files were exposed, and the game was cracked within hours. The recurrence of this specific error raises questions about the security protocols employed by developers and publishers when preparing preload assets on Steam.
While Valve offers robust backend tools for encrypting preload content, the human element involved in uploading builds remains a vulnerability. As one gaming veteran noted in the Insider Gaming article, “The human element involved with uploading a build for preloading is an inherently weak one,” pointing out the volatility of release processes even for experienced teams.
The Role of DRM: A Renewed Debate
The Forza Horizon 6 leak has reignited the long-running debate over digital rights management. Developers and publishers have increasingly turned to third-party DRM solutions like Denuvo to protect their titles during the critical launch window. Denuvo, while controversial among players due to occasional performance overhead, has historically bought developers days or weeks before a crack emerges.
John Papadopoulos of DSOGaming highlighted the irony: “In a funny way, this accident shows why some companies choose to use Denuvo. … It’s not like Steam’s DRM, which can be cracked within a couple of hours.” With only Steam’s native DRM in place, crackers were able to bypass protections for Forza Horizon 6 in record time, leaving the game fully exposed to the high seas.
The Broader Gaming Ecosystem
The leak comes at a time when the gaming industry is grappling with increasing pre-release security failures. In addition to Death Stranding 2 and now Forza Horizon 6, other high-profile titles have suffered similar fates. The trend highlights a systemic vulnerability in the digital distribution chain, especially as games become larger and preloads become standard practice.
For fans who have been eagerly awaiting Forza Horizon 6, the leak presents a moral dilemma. The game was widely anticipated for its new Japanese setting, Touge Battles, and extensive vehicle roster. Many players have expressed disappointment that the experience has been spoiled by early screenshots and videos circulating online. Others have chosen to wait for the official release, which is still scheduled for May 19 for standard edition owners, with Premium Edition owners getting access on May 15.
Perspective: What the Leak Means for the Industry and Players
Security Overhaul on the Horizon?
The Forza Horizon 6 leak could serve as a wake-up call for Valve and developers relying on Steam’s preload system. While Steam remains the dominant PC gaming platform, the repeated failure to secure preload files suggests that current encryption defaults may be too permissive. It would not be surprising to see Valve tighten restrictions on how developers upload builds or implement automatic encryption checks before files go live.
For Microsoft and Playground Games, the incident may accelerate internal reviews of their digital asset management and distribution workflows. The reputational damage is twofold: first, the leak itself undermines months of marketing and hype-building; second, the ease with which the game was cracked could diminish perceived value among some consumers, particularly those in regions where pricing is a significant factor.
A Mixed Blessing for Pirates and Players
For the pirate community, the leak is a windfall. Not only is the game available for free, but it is also the full Premium Edition, potentially saving crackers and players hundreds of dollars. However, the risks of downloading leaked files should not be underestimated. As Neowin warned, “Any files downloaded in this way always carry the risk of them being altered by the party that’s sharing it.” Malware, ransomware, and data theft are real threats when downloading cracked software from unverified sources.
For legitimate players, the leak has dampened some of the excitement. The surprise of discovering a new map, the joy of unboxing rare cars, and the thrill of exploring Japan’s open roads are now partially spoiled by early access content. That said, many fans remain committed to supporting the developers, and early sales numbers will offer a clearer picture of the leak’s true impact.
The Future of Game Launches
As the industry moves toward shorter windows between announcement and release, and as day-one patches become standard, the security of preload files will only grow in importance. The Forza Horizon 6 leak demonstrates that even the biggest franchises are not immune to costly human errors. It also shows that DRM-free philosophies, while appreciated by many, come with significant trade-offs.
Interestingly, the leak has already prompted discussions about alternative distribution models. Some have called for staggered regional releases to limit the window for piracy, while others have advocated for more aggressive use of server-side validation. Either way, the incident is likely to influence how titles like Directive 8020—which was leaked alongside Forza Horizon 6—and others are handled in the future.
In the meantime, the focus remains on May 19, when Forza Horizon 6 officially hits shelves. Whether the leak will dent its commercial performance remains to be seen, but one thing is certain: the conversation around game security, DRM, and consumer ethics has been reignited, and the industry will be watching closely.
For more on high-profile controversies and unexpected turns in the world of entertainment, read our coverage of Alfredo Adame Fakes Heart Attack in ‘La Mansión VIP’ Ahead of Grand Finale and Greg Davies BAFTA Monologue: Farts, Feuds, and Viewer Fury.
Comments