In a surprising turn of events, achievement data for several titles that have not yet been released—or even officially announced—has surfaced on public achievement tracking sites such as Exophase and SteamDB. Among the games whose hidden achievement lists were inadvertently revealed are high‑profile projects like the upcoming *Fable* reboot, *Persona 6*, *Kingdom Hearts 4*, and the sequel to *Control*, known as *Control Resonant*.
The leak was first highlighted by Simon Carless, the founder of GameDiscoverCo, who explained that Valve inadvertently introduced a significant bug during its routine weekly maintenance window. Carless said that the bug caused the Steam achievement API to expose data that is normally kept private until a game is officially launched or its achievements are meant to be public. As a result, automated crawlers operated by third‑party sites that monitor Steam’s achievement system began pulling in records for every title that has an achievement framework attached, regardless of its release status. "Valve unfortunately rolled out a major bug around achievements after its weekly maintenance window," Carless noted.
"As a result, automated data collectors of Steam achievement info such as Exophase and SteamDB are collecting achievement data for every single Steam game that has one, even those unreleased… or even unannounced." Mike Bendel, the owner of Exophase, clarified that the situation is not a deliberate data breach but rather a side effect of Valve’s error. In a response to a user on the ResetEra forum, Bendel explained that the achievement information for games that should remain hidden is currently accessible through the Steam API, which is why the data was scanned and displayed on his site. He added, "I usually never see games without an actual name pop up with achievements, yet over the past hour or so a bunch have (when there's an unknown name we just set it to the AppID)." The phenomenon has not been limited to the flagship titles mentioned earlier. According to a report from Gematsu, a wide array of other projects also had their achievement data unintentionally exposed.
The list includes *Gears of War: E‑Day*, the upcoming *Clutch* title, *Horizon Hunters Gathering*, *Ace Combat 8*, *Metro 2039*, *Star Wars: Galactic Racer*, *Stranger Than Heaven*, *Rayman Legends: Retold*, and *Tomb Raider: Legacy of Atlantis*. Each of these games, some of which are still in early development phases, now has a publicly visible set of achievement identifiers that were never meant to be seen by the community. GamesIndustry.biz has reached out to Valve for comment and further clarification on the scope of the issue, but as of this writing Valve has not issued a detailed public statement beyond acknowledging the bug.
The company’s previous experience with data exposure adds a layer of concern. In July, Valve confirmed that personal information belonging to European customers had been compromised after a breach at CEVA Logistics, the regional shipping partner responsible for delivering Steam hardware. That incident, which took place between July 29 and August 1, was discovered by Valve on August 7, and it underscored the importance of robust security practices across the entire Steam ecosystem. The current achievement leak, while not directly related to personal data, still raises questions about the integrity of Valve’s API and the safeguards that prevent premature exposure of game content.
Achievements are often used by developers as a form of narrative or gameplay guidance, and leaking them before a title’s official launch can spoil intended surprises, spoil the pacing of content reveals, or give competitive players an unfair advantage in early testing phases. For developers, the unintended disclosure of achievement data can be problematic for several reasons.
First, achievements are frequently tied to in‑game milestones that are meant to be discovered organically by players. When those milestones become visible on public databases, the element of surprise is lost, potentially diminishing the overall player experience. Second, many studios use achievement titles and descriptions as a marketing tool, revealing bits of lore or gameplay mechanics gradually.
Early exposure can undermine carefully planned promotional strategies. From the perspective of the tracking sites, the influx of previously unknown entries has created both an opportunity and a challenge. On one hand, users who are passionate about cataloging every achievement can now explore a richer dataset.
On the other hand, the sites must now grapple with how to label and present data that is technically private, potentially violating the expectations of developers and publishers who assumed those details would remain hidden until an official reveal. Valve’s response to the situation will likely involve a quick patch to the achievement API, restoring the intended privacy settings for unreleased titles. It may also prompt the company to review its maintenance procedures and add additional safeguards to prevent similar bugs from slipping through in future updates.
In the meantime, developers whose games were affected are advised to monitor the public listings on Exophase, SteamDB, and similar services, and to communicate with their communities to manage any confusion that may arise from the premature visibility of achievement data. The broader gaming community is watching closely, as this incident highlights the delicate balance between openness and confidentiality in modern game distribution platforms. While transparency can foster engagement, it also carries the risk of exposing content that creators prefer to keep under wraps until the appropriate moment. As Valve works to rectify the issue, both players and developers will be hoping for a swift resolution that restores confidence in the reliability of Steam’s achievement infrastructure.