Steam Achievement Data for Unreleased and Unannounced Titles Exposed on Sites Like Exophase and SteamDB

In a surprising turn of events, achievement data for a number of games that have not yet been released—or even officially announced—has surfaced on public tracking services such as Exophase and SteamDB. Among the titles whose hidden achievements were inadvertently revealed are high‑profile projects like the upcoming entries Fable, Persona 6, Kingdom Hearts 4, and Control Resonant. The leak was first brought to light by Simon Carless, the founder of GameDiscoverCo, who explained that Valve inadvertently introduced a significant bug during its routine weekly maintenance window. Carless said that the bug caused the Steam achievement system to expose information that is normally kept private until a game’s official launch.

As a result, automated crawlers that feed data to third‑party achievement aggregators began pulling achievement lists for every Steam title that has an achievement component, regardless of whether the game is publicly visible, still in development, or even completely unannounced. "As a result, automated data collectors of Steam achievement info such as Exophase and SteamDB are collecting achievement data for every single Steam game that has one, even those unreleased... or even unannounced," Carless told reporters. He emphasized that this was not a deliberate data breach by Valve, but rather an unintended side effect of a technical oversight.

Mike Bendel, the owner of Exophase, echoed this assessment, clarifying that the exposure stemmed from a Valve error rather than a malicious leak. In a response to a user inquiry on the ResetEra forum, Bendel explained, "A bunch of games with achievements that should be private are accessible through the API right now and that's why they got scanned into the site. I usually never see games without an actual name pop up with achievements, yet over the past hour or so a bunch have (when there's an unknown name we just set it to the AppID)." The issue has also been documented by Japanese gaming outlet Gematsu, which listed several additional titles that were affected by the glitch. These include Gears of War: E‑Day, the upcoming multiplayer shooter Clutch, Horizon Hunters Gathering, the next Ace Combat installment (Ace Combat 8), Metro 2039, a new Star Wars racing game titled Galactic Racer, the indie title Stranger Than Heaven, a re‑imagined version of Rayman Legends called Retold, and a rumored Tomb Raider project dubbed Legacy of Atlantis.

Industry observers have noted that the exposure of unreleased achievement data could have broader implications for developers and publishers. Achievements are often used as a marketing tool, and their design can hint at gameplay mechanics, narrative milestones, or hidden content that studios prefer to keep under wraps until closer to launch. By unintentionally revealing these details, the bug may have given fans and competitors premature insight into the structure and progression of highly anticipated games. GamesIndustry.biz has reached out to Valve for comment and further clarification on the scope of the incident, the steps being taken to remediate the bug, and any potential impact on user privacy.

While Valve has not yet issued a formal statement specifically addressing this achievement leak, the company has a recent history of dealing with security‑related incidents. Earlier this year, in July, Valve confirmed that personal information belonging to European customers had been compromised in a breach involving its regional shipping partner for Steam hardware, CEVA Logistics.

According to Valve, the attack on CEVA took place between July 29 and August 1, with the company becoming aware of the intrusion on August 7. That breach prompted Valve to issue a detailed security advisory and to work closely with CEVA to tighten data protection measures. The current achievement exposure incident appears to be unrelated to the CEVA breach, but it underscores the challenges that large platforms like Steam face in balancing the openness of their ecosystem with the need to safeguard sensitive development data.

Valve’s weekly maintenance windows are intended to improve stability and roll out new features, yet even routine updates can occasionally introduce unforeseen bugs that ripple across the broader community. For developers, the incident serves as a reminder to audit the visibility settings of in‑game assets, especially those that are tied to Steam’s achievement API. Some studios may choose to delay the creation of achievement metadata until closer to launch, while others might implement additional checks to ensure that private data cannot be accessed via public endpoints.

From the perspective of the gaming community, the leak has sparked a wave of speculation and excitement. Fans of franchises such as Fable and Persona have begun dissecting the newly visible achievement titles, trying to infer possible story arcs, character developments, or gameplay innovations.

While this kind of speculation can be fun, it also places pressure on developers to manage expectations and address rumors that may not reflect the final product. In summary, a maintenance‑related bug on Valve’s side inadvertently opened a window for third‑party services to scrape achievement data from games that are still under development or have not been officially announced. The error was quickly identified by both Valve’s partners and industry observers, and discussions are ongoing about how to prevent similar occurrences in the future. As the affected titles continue toward their respective releases, both developers and the broader Steam community will be watching closely to see how Valve resolves the issue and safeguards the confidentiality of unreleased content.