A Steam API malfunction has exposed achievements for over 50 unreleased games, revealing secret projects tied to Avengers, Dune, Sonic, Sea of Thieves and more. The leak has triggered intense scrutiny across the PC gaming community
Dozens of unannounced games have been thrust into the spotlight after a Steam API error made private achievement data publicly accessible, exposing secret projects from major franchises including Avengers, Dune, Sonic and Sea of Thieves. The breach, which surfaced on third-party tracking sites, has rapidly escalated into one of the most significant leaks in recent PC gaming history.
How the Leak Emerged
The incident began when Exophase and SteamDB, both known for tracking achievement data, started listing achievements for games that had not been officially announced or released. This anomaly was quickly noticed by users on the ResetEra forum, who speculated that Valve's backend had inadvertently made confidential information available through its API. Exophase's owner confirmed that a surge of unnamed games with accessible achievements had been detected, a scenario not seen in routine scans.
Within hours, the leak had grown to encompass over 50 unreleased titles. The exposed data included not only achievement lists but also internal AppIDs, making it possible to identify projects that had not even been teased to the public. The scale and specificity of the leak set it apart from typical datamining or store-listing incidents, as it provided concrete evidence of development activity across multiple high-profile franchises.
Unannounced Games and Franchise Surprises
The most striking revelations involve a new Avengers game, a Dune project, and fresh entries for Sonic, Sea of Thieves, Stellaris and Twin Peaks. While details remain scarce, the presence of achievement data strongly suggests these projects are in active development for Steam. Notably, the Avengers title is rumoured-though not confirmed-to be a revival of the long-cancelled THQ project, but this claim remains unverified and should be treated with caution.
The leak also surfaced evidence of Squadron 42, the single-player campaign for Star Citizen, which has been delayed to at least Q2 2027 but now appears set for a Steam release. Other notable entries include two unannounced Warhammer games, ACE COMBAT 8, Attack on Titan 3, Clive Barker's Hellraiser, Control Resonant, Crazy Taxi: World Tour, Deus Ex Remaster, Dragon Quest Monsters: The Withered World, FINAL FANTASY RESONANCE, Horizon Hunters Gathering, Kingdom Hearts IV, Last Epoch, Lords of the Fallen II, Mega Man Dual Override, Metro 2039, Minecraft Dungeons 2, Persona 6, PGA Tour 2k27, Rayman Origins, Silent Hill: Townfall, Star Trek Outposts, Tales of Eternia Remastered, Thief: The Dark Project, Tomb Raider: Legacy of Atlantis, Tropico 7 and more.
Despite the breadth of the leak, there is no sign of GTA 6 among the affected titles, undermining speculation that a PC release might arrive sooner than expected. The absence of certain anticipated games is as telling as the presence of others, offering a rare glimpse into what is-and is not-on the near-term Steam roadmap.
Community and Industry Response
The gaming community has responded with a mix of excitement and concern, as the leak provides both tantalising hints of future releases and a reminder of the risks inherent in digital storefront infrastructure. Developers and publishers have so far remained silent, with no official statements addressing the breach or its implications for ongoing projects.
For players, the leak offers a preview of what may be coming to Steam in the next few years, but it also raises questions about the security of unreleased content and the potential for spoilers. Achievement lists can reveal narrative beats, gameplay systems and even unannounced features, making this more than a simple list of names. The situation is being closely monitored for further developments, and any official response from Valve or affected studios will be critical in shaping the fallout.
Leaks of this scale are rare, but not unprecedented. In a similar vein, reported earlier this year, early access to achievement or store data has previously tipped off players to upcoming releases, though seldom with such a broad sweep of high-profile franchises.
What Remains Unclear
While the achievement data confirms the existence of these projects on Steam's backend, it does not guarantee imminent announcements or releases. Development timelines can shift, projects can be cancelled or reworked, and achievement lists themselves may change before launch. The lack of official comment leaves open the possibility that some of these games may never see public release, or may appear in substantially different forms.
Players should also be wary of interpreting every AppID as a finished product. Some entries may represent internal builds, test environments or placeholder projects. Until developers or publishers provide concrete details, the leak remains a snapshot of current development activity rather than a definitive release schedule.
For those tracking the future of major franchises, the leak is both a treasure trove and a cautionary tale. It exposes the fragility of digital secrecy in an era where backend systems are constantly probed by automated tools and curious players alike. Valve's handling of the aftermath will set a precedent for how platform holders respond to large-scale data exposure, and the industry's silence so far suggests a scramble to assess the full impact before making public statements. The lesson for players is clear: leaks can offer a tantalising look behind the curtain, but they rarely tell the whole story, and the real consequences will only become apparent as official announcements catch up with what has already been revealed.
Achievement systems are a core feature of modern gaming platforms, providing players with structured goals and developers with a way to track engagement. On Steam, achievements are tied to unique AppIDs and are typically kept private until a game is officially released or announced. When backend errors occur, as in this case, they can inadvertently expose not just the existence of a project but also key gameplay details and narrative elements. For players, achievement leaks can spoil surprises and story beats, while for developers, they represent a loss of control over how and when information reaches the public. The incident highlights the importance of robust digital infrastructure and the challenges of maintaining secrecy in a connected, data-driven industry.
