Pirated copies of Microsoft's highly anticipated racing game Forza Horizon 6 began circulating online this week after the company accidentally uploaded unencrypted game files to Steam on Sunday morning — more than a week before the title's official launch date — in what appears to be a straightforward human error with significant commercial consequences.
Microsoft's upcoming release Forza Horizon 6 was compromised before it even launched, after an internal mistake allowed the full, unprotected game files to become publicly accessible through Steam's preload system.
According to tracking data from SteamDB, Microsoft uploaded approximately 155 gigabytes of unencrypted Forza Horizon 6 files to Steam in the early hours of Sunday morning. Under normal circumstances, games made available for preload are encrypted, with a decryption key only released to players at launch. In this case, the files were uploaded without that protection in place.
The unprotected upload was spotted almost immediately by users monitoring Steam's database activity, with alerts spreading quickly across social media platforms and Reddit. Within hours, members of Reddit's CrackWatch community — which tracks the status of cracked games — reported that the game's copy protection had been circumvented, enabling downloads of pirated versions across multiple sites.
Ars Technica, which reviewed several of those piracy sites, confirmed that playable copies were available. Reddit's Legal Operations team subsequently removed at least one CrackWatch post discussing the crack, though related discussions remained active on the platform as of Monday morning.
Microsoft has not yet issued a public statement on the incident. The company faces the difficult reality that, once unencrypted files are downloaded and distributed across peer-to-peer networks and piracy repositories, there is little that can be done to recall them. The game's official release date remains unchanged.
The incident highlights a persistent vulnerability in digital game distribution: the gap between a file being uploaded to a platform and that file being properly secured. Steam's preload system — which allows large game files to be downloaded in advance to reduce day-one wait times — depends entirely on publishers correctly applying encryption before files go live. When that step is skipped or fails, the consequences can be immediate and irreversible.
Forza Horizon 6 is among Microsoft's most prominent first-party titles of the year, and the leak raises questions about potential lost sales, particularly given the game is expected to launch on both PC via Steam and Xbox Game Pass.
Analysis
Why This Matters
- Commercial impact: Pre-release piracy can depress day-one sales figures, which are closely watched by analysts and used by Microsoft to justify Game Pass investment. Even a partial erosion of launch-week revenue is meaningful for a flagship title.
- Platform trust: The incident puts pressure on Steam's preload system and raises questions about whether publishers can reliably rely on Valve's infrastructure to safeguard pre-release content.
- Broader industry signal: If a company of Microsoft's scale can make this mistake with a high-profile title, it underscores systemic risks in how the games industry handles pre-release distribution.
Background
Steam's preload feature has existed since the platform's early days, allowing players to download large game files in advance of launch — a practical solution to the problem of slow day-one downloads. The system relies on publishers uploading encrypted depot files, with decryption keys held back until release time. This approach has generally worked well, though it has occasionally been exploited when publishers or platform operators make configuration errors.
Forza Horizon is one of Microsoft's flagship gaming franchises, developed by Playground Games. The series has consistently been among the best-reviewed racing games of each console generation, and Forza Horizon 5 (2021) attracted tens of millions of players through Game Pass. The sixth instalment carries significant commercial and reputational weight for Microsoft's gaming division.
Pre-release game leaks are not unprecedented — high-profile titles including several Nintendo releases have leaked ahead of launch in recent years — but leaks originating from a publisher's own distribution error are relatively rare and particularly embarrassing.
Key Perspectives
Microsoft/Publishers: The company faces reputational damage alongside the commercial risk. Publishers generally argue that pre-release piracy directly harms sales, though the research on this relationship is contested. Microsoft is unlikely to delay the launch, meaning the pirated version will circulate for the remainder of the pre-release window.
Players and consumers: Many legitimate buyers who have pre-ordered the game are unaffected, and some argue that people who download pirated copies were unlikely to purchase the game regardless. Others note the leak may generate additional attention and buzz around the title.
Critics and security researchers: The incident reinforces long-standing criticism that DRM and encryption systems, while imperfect, serve a real purpose — and that process failures by publishers can instantly nullify those protections. It also raises questions about internal quality-control procedures at major studios.
What to Watch
- Whether Microsoft issues a formal statement acknowledging the error and outlining steps taken to prevent recurrence
- Day-one and week-one sales figures for Forza Horizon 6 compared to analyst expectations, which may offer a rough measure of the leak's commercial impact
- Any response from Valve regarding whether Steam's preload system will receive additional safeguards to prevent similar publisher-side errors in future