Persona 6, Kingdom Hearts 4, Fable, Penis Bird... All the heavy hitters are here!

In the early hours on Wednesday, August 9, a huge leak brought about by the Steam API spilled the beans on over 125 games. These titles had their achievement lists freely available for anybody with an internet connection to browse.

The situation becomes particularly intriguing when it is revealed that many of the titles mentioned in the leak had not yet been publicly announced. Even more concerning is that several of the leaked achievements included spoilers for characters, locations, and significant plot points in these upcoming games, regardless of whether the games themselves had been announced.

Several unannounced titles surfaced in a recent leak, including new games based on Dune, Star Wars, Sonic, and Avengers, as well as a game inspired by the TV show Twin Peaks. Additionally, significant plot points and locations from various announced titles were revealed in this leak. These titles include Kingdom Hearts 4, Persona 6, Gears of War: E-Day, Fable, Control: Resonant, Tomb Raider: Legacy of Atlantis, among many others.

It should go without saying that if you want to avoid all spoilers for any of these titles, you may need to go on a lengthy social media blackout. For example, the Disney worlds and IPs featured in Kingdom Hearts 4 are now known despite Square Enix keeping those locations close to their chest thus far. Dungeon names and the setting for Persona 6 are also now known despite that game not coming out until mid-to-late 2027 at the earliest.

It's important to note that even if a title appears in the list below, there is no guarantee that the game will be released on Steam. For instance, Squadron 42 is included among the titles listed. However, as of now, the single-player component of Star Citizen has not been announced for release on Steam. Additionally, that release is still quite a ways away, so it's uncertain what will happen by the time it arrives.

According to Forbes, the exact cause of the Steam API leak is unclear. What is known is that a "bug allowed these achievements to be accessed through Steam's API." This vulnerability enabled third-party services and websites, such as SteamDB and Exophase, to obtain achievement information, user scores, and player counts for various titles.