It’s no secret that game demos can be a goldmine for data miners, but sometimes, developers make it a little too easy. According to new information provided to Out Of Bounds Gaming, it appears that Saber Interactive’s John Carpenter’s Toxic Commando shipped its Steam demo with a massive amount of unencrypted data, effectively laying out the roadmap for the entire game ahead of the release.
While the game has since been released, the details found within the demo’s files highlight a significant oversight in data security during the pre-launch phase.
The Leak Discovery
The breach wasn’t the result of complex hacking or high-level social engineering. Instead, it was a simple matter of an unencrypted .pak file. By using a standard tool like 7-Zip, a user was able to extract a text string file that contained every single line of dialogue and subtitle for the entire game.
Alarmingly, this didn’t just include the demo levels. The file contained the full script for the base game, along with what appears to be a future DLC missions or cut content. Despite efforts by the finder to contact the development team to warn them of the vulnerability, the outreach reportedly went unanswered.
The “Ice Abyss” Mission
The leaked dialogue confirms a new setting far removed from the sludge of the base game. The squad is sent to a snowy resort to track down a “looping Obsidian SOS signal” and recover a vehicle called the “ColdBorn.”
Based on the subtitles, here is what the mission entails:
- The ColdBorn: The team locates an abandoned, heavy vehicle—the ColdBorn—and must bring it back online. The script mentions finding “shield modules,” battery units, and “power cells” to get the rig operational.
- The Core: Central to the mission is a “massive crystal” or “Core” that is found levitating in a nest. The dialogue indicates that this Core reacts to the infected; Walter and Leon mention that it “feeds” on the zombies to stabilize itself and that the squad needs to “keep infected away” to prevent it from recovering.
- Environmental Elements: The script is heavy on “cold” mechanics. Characters frequently mention frostbite, numb hands, and the necessity of staying near heaters or fire. Leon warns the team that their “suits won’t handle this cold alone.”
- Extraction: The mission involves a monorail system used to transport the Core to the ColdBorn, with the final goal being to “strip the crystalline shell” to secure the energy source inside.
A Massive Security Oversight
The wild part is that Toxic Commando is already out, and somehow, this didn’t leak everywhere. It’s honestly a miracle. It just goes to show how easy it is for things to get spoiled when a studio forgets to do something as basic as locking their demo files. When you leave things unencrypted like this, you’re basically handing your entire story and future content to anyone who knows how to right-click a folder. Hopefully, they’re a bit more careful next time.
The Developer Team hasn’t said a word about “Ice Abyss” yet, but usually you don’t record this much dialogue just to bin it. We’re definitely going to those Icy mountains eventually. By the way to this day you can extract many Data and Strings using the same technique mentioned above.
