In a surprising turn of events, achievement data for a number of games that have not yet been released—or even officially announced—has surfaced on public tracking services such as Exophase and SteamDB. The leak includes titles that fans have been eagerly awaiting, such as the next installment in the Fable series, Persona 6, Kingdom Hearts 4, and the upcoming Control: Resonant expansion. The root cause, according to Simon Carless, the founder of GameDiscoverCo, appears to be a technical mishap on Valve’s side.
Carless explained that Valve inadvertently introduced a "major bug" into its achievement system during its regular weekly maintenance window. This bug caused the Steam API to expose achievement data for every game that has an achievement list attached to it, regardless of whether the title is currently available to the public or even officially confirmed by the developer. "As a result, automated data collectors of Steam achievement info such as Exophase and SteamDB are collecting achievement data for every single Steam game that has one, even those unreleased... or even unannounced," Carless said in a recent interview.
The unintended exposure means that the achievement structures—often including hidden milestones, secret trophies, and progress markers—have been scraped and displayed on third‑party sites that normally aggregate publicly released information. Mike Bendel, the owner of Exophase, clarified that the situation is not a classic "data leak" in the sense of a malicious hack, but rather an error stemming from Valve’s own systems. In a response to a user query on the ResetEra forum, Bendel wrote: "A bunch of games with achievements that should be private are accessible through the API right now and that's why they got scanned into the site." He added that his platform typically does not display games lacking an official title; when the API returns an unknown name, Exophase defaults to showing the numeric AppID, which is why several entries appeared as cryptic numbers during the brief window of exposure. The phenomenon has not been limited to the high‑profile franchises mentioned earlier.
According to reporting from Gematsu, a broader set of titles also had their achievement data unintentionally revealed. These include "Gears of War: E‑Day," a rumored spin‑off in the long‑running shooter series; "Clutch," an indie title that had kept its development under wraps; "Horizon Hunters Gathering," a new entry in the Horizon universe; "Ace Combat 8," which fans have long speculated about; "Metro 2039," a potential sequel to the post‑apocalyptic Metro games; "Star Wars: Galactic Racer," an upcoming racing title set in the Star Wars galaxy; "Stranger Than Heaven," a narrative‑driven adventure; "Rayman Legends: Retold," a reimagining of the beloved platformer; and "Tomb Raider: Legacy of Atlantis," a rumored new chapter in the Lara Croft saga.
GamesIndustry.biz has reached out to Valve for comment and further clarification, seeking to understand the scope of the issue and whether any corrective steps have been taken. While Valve has not yet issued a detailed public statement specifically about the achievement exposure, the company’s history of transparency on related matters offers some context.
Earlier this year, in July, Valve confirmed that personal data belonging to European customers had been compromised as a result of a breach at CEVA Logistics, the regional shipping partner responsible for handling Steam hardware deliveries. The breach, which occurred between July 29 and August 1, was discovered by Valve on August 7, prompting an investigation and a series of notifications to affected users. The recent achievement incident underscores the delicate balance that platforms like Steam must maintain between providing developers with robust tools for tracking player progress and safeguarding the confidentiality of unreleased content.
Achievements are often used by developers as a form of narrative foreshadowing or as a way to tease upcoming features, and premature exposure can diminish the surprise element that marketing teams work hard to preserve. From a technical standpoint, the bug appears to have been triggered by an oversight in how Valve’s maintenance scripts interact with the achievement API. During routine updates, a flag that normally restricts access to achievement metadata for unreleased titles was not correctly re‑applied, leaving the data publicly queryable for a short period. Automated crawlers operated by services like Exophase and SteamDB, which continuously poll the Steam API for new or updated achievement information, captured the exposed data and displayed it on their websites within minutes.
The fallout from this incident is likely to be multi‑layered. For developers, the premature visibility of achievement structures could force adjustments to their rollout plans, potentially delaying the release of certain titles or requiring changes to the achievement design to preserve secrecy. For players, the incident serves as a reminder that not all information seen on third‑party tracking sites is officially sanctioned, and that such platforms can sometimes reflect transient glitches rather than stable, intended content. Valve’s response to the bug will be closely watched.
In similar past incidents, the company has acted quickly to patch the underlying issue, revoke any unintended API access, and issue public statements to reassure both developers and the community. It is reasonable to expect that Valve will release a hotfix to restore the proper privacy settings for achievement data, and may also consider implementing additional safeguards—such as stricter validation checks during maintenance windows—to prevent a recurrence. In the meantime, users of Exophase, SteamDB, and similar services are advised to treat any newly appearing achievement lists for unknown or unreleased titles with caution.
These entries are likely the result of the temporary API exposure and may be removed or corrected once Valve resolves the problem. For those interested in staying up‑to‑date on the situation, monitoring official Valve communications, as well as reputable gaming news outlets, will provide the most reliable information. Overall, while the incident has generated a flurry of curiosity and speculation about upcoming games, it also highlights the importance of robust data handling practices in large digital distribution ecosystems.
The community will be watching closely to see how Valve addresses the bug, restores confidence in its achievement system, and ensures that future maintenance operations do not inadvertently reveal confidential game data again.