007 First Light Skips Steam and Xbox Preload After Forza Leak

007 First Light unlocked at 8am Pacific on Wednesday for buyers who paid for the 24-hour early access bundle, and Xbox Series X|S and PC owners started an 80-plus gigabyte download from zero at that exact minute. PS5 pre-order customers had the full build sitting on their consoles two days earlier. IO Interactive cut preload from the two platforms where leaked retail builds spread fastest, three weeks after Microsoft’s own Forza Horizon 6 escaped from an unencrypted Steam preload package and reached pirates a full week before launch.

The Copenhagen studio also attached Denuvo Anti-Tamper to its Steam listing on May 21, six days before global release, after months of pre-orders sold without any digital rights management (DRM) disclosure. By Tuesday night, a crew calling itself DenuvOwO claimed it had bypassed that protection. The Steam refund queue opened before the crack did.

How the Preload Block Splits the Three Platforms

The three SKUs share the same May 27 global launch and almost nothing else about how players started the game this week. PlayStation 5 preload opened on May 24 because Sony makes preload mandatory for digital pre-orders. Microsoft and Valve leave that switch to the publisher, and IO Interactive flipped it off.

That made Tuesday a queue. Xbox Series X|S owners with gigabit fiber were probably playing inside the hour. PC buyers on cable connections, especially in markets where ISPs throttle large game downloads, looked at multi-hour windows before the first menu loaded. The file footprint runs 45.6 GB on PS5 and roughly 80 GB on PC and Xbox Series X|S, plus another 20 to 30 GB of recommended free space for the day-one patch.

The gap between the PS5 install and the other two is a quirk of the Glacier Engine renderer rather than missing content. The studio’s frame-graph approach to resource handling lets the PS5 build use platform-specific texture streaming, while the PC and Xbox versions ship with redundant resource copies. The end-user experience is the same campaign length and the same online checks across all three. The Xbox decision was the more pointed one, given the platform’s file structure sits architecturally close to PC builds, which is why dataminers historically pull marketing assets and unencrypted strings from Xbox preload bundles within hours of public release.

The Forza Horizon 6 Disaster Sitting Behind This Call

To understand why IO Interactive moved this way, look at what happened to Microsoft on May 10. A Steam preload update for Forza Horizon 6 went live with the full 155 GB build unencrypted. Within hours, the files were on torrent sites. Within a day, the game was cracked and playable, nine days before its planned May 19 launch.

Microsoft’s response called the incident not a preload issue, then announced franchise-wide and hardware-level bans against accounts caught running the leaked build. The denial did not change the calendar. Pirates had a working copy of the Playground Games release before any paying customer could legally play it.

• 155 GB Forza Horizon 6 build pushed to Steam servers without encryption on May 10
• 9 days before the planned May 19 retail launch
• Within hours of the leak, working cracks were circulating across piracy communities
• Franchise-wide and hardware-level bans announced by Xbox against accounts caught running the leak

For any publisher with a high-profile launch in the same window, the lesson read sharp. Even the platform owner cannot guarantee preload encryption holds. Steam, Xbox, and PlayStation each provide encryption frameworks, but the actual packaging step happens at the studio. A mistake in the build pipeline gets pushed live the moment the publisher hits publish, and seeders propagate within minutes. The Forza files crossed the threshold from recoverable to permanent before Microsoft’s security team woke up.

IO Interactive’s response was the conservative one. Skip preload on the platforms where a packaging error would be unrecoverable, and accept the launch-night download grumbling as the trade. The studio has not formally tied the decision to the Forza incident, but the timing speaks for itself. The original X post confirming the no-preload call framed it explicitly as anti-leak insurance, and that read has stuck across enthusiast forums.

Denuvo Arrived Six Days Before Launch

The preload story was not the only late move IO Interactive made. The 007 First Light Steam product page picked up a Denuvo Anti-Tamper notice on May 21, six days before global release. For most of the pre-order window, that line did not exist. Buyers who locked in their copies in February or March did so against a listing that disclosed no third-party DRM.

Denuvo’s reputation among PC players runs hostile. The system has been linked to first-launch stutter, slower load times on hard-drive installs, and online check-in requirements that complicate genuine offline play. Tom’s Hardware reported the addition as a last-minute bombshell, and refund tickets started landing on Steam support inside the same evening.

The kicker is IO Interactive’s own track record. Hitman shipped with Denuvo at launch in 2016 and shed it within a year. Hitman 2 did the same. HITMAN World of Assassination has run without the protection for the bulk of its life. The Copenhagen team built reputation among PC players as a studio that uses Denuvo as a temporary launch shield and then strips it once the piracy window closes.

The Hitman pattern set the expectation. Players who bought into Bond knowing this studio’s history reasonably assumed the same trajectory. The May 21 listing change inverted the assumption mid-purchase, with no roadmap published for eventual removal.

Why add the protection back now, and why hide it until the last week? The most defensible reading is the same one driving the preload call. After watching Forza Horizon 6 leak from a platform-side error nobody at Playground Games or Turn 10 caused, the studio added every available defensive layer and gave the disclosure as little time on the store page as the procurement teams would allow.

Refund Threads Open Before the Servers Did

The reaction from the PC pre-order base has been louder than the preload story itself. Steam community threads filled within hours of the Denuvo disclosure, and Reddit’s r/pcgaming carried a 3,000-comment thread on the change by the weekend. The grievances cluster into a short list, and they are largely about disclosure timing rather than the technology itself.

• DRM disclosed after purchase. Valve’s published refund policy covers a 14-day, two-hour rule that does not cleanly help a buyer who pre-ordered months ago and only learned about Denuvo this week.
• Cold launch download of 80 GB. Removing preload pushed the entire install to launch night and tested every household’s connection at the same minute, including buyers who paid extra for early access.
• Online check-ins for a single-player game. Denuvo’s check-in cadence has historically tied playability to network conditions, which sits poorly with a campaign-driven release.
• Performance overhead on lower-end PC builds, including the GeForce GTX 1660 tier that the studio’s published PC system requirements explicitly support.

IO Interactive’s official channels have not addressed the refund traffic directly. The studio’s BAFTA presentation last month positioning First Light as the return of console-class Bond storytelling after a 14-year licensing gap framed the launch as a cultural moment. The marketing has not yet adjusted to a release week dominated by anti-piracy mechanics rather than gameplay.

DenuvOwO Beat the Disc to the Punch

The defensive moves did not hold. On Tuesday, the hacker group calling itself DenuvOwO claimed credit for a hypervisor-level bypass of the Denuvo protection in 007 First Light. The crack surfaced roughly 24 hours before global launch and within hours of PS5 early access opening. By the time the Xbox and PC store pages flipped from pre-order to purchase, a working pirated build was already in circulation.

The DenuvOwO crew is the same outfit that broke Denuvo coverage on multiple late-2025 releases, and the speed of the First Light bypass suggests the group had the build under analysis well before the official unlock. The implication is uncomfortable. Both defensive layers from IO Interactive were structured around delaying access by 24 to 48 hours. Both failed inside that window.

For paying PC and Xbox customers, the practical result was waiting in an 80 GB launch-night download queue while a cracked version was already running on machines that paid nothing. Whether the leak path was a separate review build, a platform-side slip, or genuine binary analysis of the launch package is still unclear. What is clear is that the no-preload calculus assumed pirates would need the retail file to crack the game. They did not.

The official 007 First Light page on IO Interactive’s site still lists the same release schedule, the Steam page still carries the Denuvo notice, and the studio’s launch trailer still leads every storefront. Nothing about the public posture has moved.

If the launch-week reviews land cleanly and the cracked build proves unstable or feature-incomplete, the defensive stack reads as worth the customer noise. If reviewers and pirates report identical experiences by Friday morning, the call to add Denuvo six days out and force every paying PC and Xbox buyer through a midnight cold download will read as the worst of both worlds.