A Steam backend slip that started surfacing late on September 8, 2026 has turned into one of the biggest accidental spoiler events in PC gaming history. Achievement lists for dozens of unreleased and previously unannounced titles, including Persona 6 and Kingdom Hearts IV, appeared on the third-party tracking site Exophase and spread across gaming media within hours. By the morning of September 9, outlets including Forbes, GamingBible, Eurogamer, and Gematsu had all confirmed the leak independently, though they disagree on exactly how large it is.
Forbes contributor Paul Tassi called it one of Steam’s “worst leaks in recent memory,” pegging the number of exposed games at “well over 125.” GamingBible put the figure at “at least 145,” while a separate count cited by outlets tracking the story landed at 85. What isn’t in dispute is the content: full achievement lists for Persona 6 and Kingdom Hearts IV reveal settings, character names, and plot-relevant details that Atlus and Square Enix have not officially announced. The leak follows a pattern this site has covered before, where a fully playable game turned up inside a separate 12TB Steam leak earlier this year.
What Leaked: Inside the Steam Backend Slip
The leak did not come from a hack or a stolen build. It came from Steam’s own backend infrastructure. Publishers routinely configure app pages, depots, and achievement lists on Valve’s platform months or years before a public announcement, all of it kept hidden behind visibility flags. When one of those flags is set incorrectly, or Steam’s systems push a change live prematurely, that hidden data becomes readable to anyone with the right tools.
That is what appears to have happened here. Achievement metadata, normally invisible until a game ships or is announced, became accessible through Steam’s public-facing API layer. From there, Exophase, a site that exists specifically to catalog trophies and achievements across platforms, indexed and published the lists. Once that happened, the information was effectively irreversible; screenshots and archived copies were circulating on social media and forums within the hour.
According to Gematsu’s report, the exposed entries for Kingdom Hearts IV explicitly noted the list “includes unannounced worlds,” while the Persona 6 entry was flagged as containing “unannounced story information.” That framing matters: this wasn’t a case of fans piecing together rumors from job listings or trademark filings. It was official, first-party achievement text, written by the developers themselves, sitting in the open. Players who want to lock down their own Steam accounts while this story develops can review this site’s Steam Guard and two-factor authentication setup guide, since backend slips of this kind occasionally coincide with a rise in phishing attempts targeting Steam credentials.
Persona 6: Yokohama, an Organization Called Hex, and 48 Achievements
Of everything exposed, Persona 6 drew the most attention, since Atlus has said almost nothing publicly about the next mainline entry in its long-running RPG series. Per GamerFuzion’s breakdown of the leaked list, Persona 6’s achievement set runs 48 entries, 12 of which are hidden (a standard Steam feature used to avoid spoiling major story beats before players reach them, which is somewhat ironic given the circumstances).
The achievement names and descriptions point to a Yokohama setting, a departure from the fictional Tokyo wards the series has used in past entries, and reference an in-game organization called Hex. Forbes’ Paul Tassi added that the list also names dungeons, describes the makeup of the protagonist’s core group, details new gameplay mechanics, and references a Velvet Room attendant, the recurring mystical character tied to the series’ signature Persona-fusion system. None of this has been confirmed by Atlus through any official channel as of publication.
The leak also exposed an achievement list for Persona 4 Revival, a remake or remaster that, like Persona 6, had not been formally announced. Its appearance alongside Persona 6 suggests Atlus has more than one unannounced project further along in development than fans expected.
Kingdom Hearts IV: Star Wars Worlds Confirmed for the First Time
Square Enix officially confirmed Kingdom Hearts IV’s existence back in 2025, but the studio has revealed only a handful of details since. The leaked achievement list changes that considerably. Per GamerFuzion, the list contains 50 achievements with 2 hidden entries, and names specific worlds including Toy Box (a returning Toy Story-themed location from earlier games) and Scala ad Caelum, a location previously teased in Kingdom Hearts III’s endgame content.
The bigger revelation, according to Forbes, is a Star Wars world. If accurate, that would mark the first time the Kingdom Hearts series has incorporated Star Wars characters and settings, something Disney has never allowed in a Kingdom Hearts title before despite the franchise’s decades-long history of crossing over with other Disney and Pixar properties. Tassi described it as newly confirmed information that “had not been previously revealed” through any official Square Enix marketing.
For a series built almost entirely around licensed crossovers with Disney’s film catalog, adding the Star Wars franchise (which Disney has owned since 2012) is a logical next step, but one Square Enix had not signaled publicly before this leak.
How Big Is This Leak, Really? The Conflicting Numbers
Every outlet covering the story agrees on the two headline names. They do not agree on scale. GamerFuzion’s initial report described “roughly 50 unreleased games” exposed at once. GamingBible raised that to “at least 145 games,” specifying that 15 of those had never been announced in any form. Forbes landed in between at “well over 125.” A separate regional count put the number at 85 affected titles.
The discrepancy likely comes down to methodology. Some outlets are counting only titles with fully readable achievement lists on Exophase at the time of writing; others are including partial listings, games where only a handful of achievements loaded before the data was pulled, or entries that later reappeared under different Steam app IDs. Because Valve does not publish an official tally of affected titles, and because the leak is still being indexed and archived by fans as of this writing, the true number may not be settled for days.
What is consistent across every report is the presence of both Persona 6 and Kingdom Hearts IV, plus a shared list of other high-profile names appearing in nearly every outlet’s coverage.
The Full List: Other Major Titles Caught in the Leak
Beyond the two headline games, reporting from Forbes, GamingBible, Eurogamer, and OpenCritic converges on a shared core list of other notable titles whose achievements surfaced in the same window. That list includes Gears of War: E-Day, Silent Hill: Townfall, Fable, Dragon Ball Xenoverse 3, and Ace Combat 8: Wings of Thieves, all previously announced games that had not yet published achievement data. GamingBible additionally reported EA Sports FC 27 among the exposed entries.
Further down the list are titles with less official confirmation, including PGA Tour 2K27, Minecraft Dungeons 2, Tomb Raider: Legacy of Atlantis, a Deus Ex remaster project, and Tropico 7. Several outlets also flagged entries for projects that have never been announced in any capacity, described only by their internal working titles, underscoring how far in advance publishers stage Steam infrastructure relative to public marketing timelines.
The sheer range of publishers involved, spanning Japanese RPG studios, Western AAA shooters, sports licensors, and mobile-adjacent publishers, is part of why researchers describe this as a systemic backend issue rather than an isolated mistake tied to one studio’s Steam configuration.
How Exophase and SteamDB Turn Hidden Metadata Into Headlines
To understand why this keeps happening, it helps to understand what Exophase and similar sites like SteamDB actually do. Neither operates by hacking Valve’s servers. Both work by continuously polling Steam’s public and semi-public APIs, the same technical interfaces that let legitimate apps display your friends list, your game library, or your achievement progress to other players.
Every game on Steam has an associated app ID, and every achievement on that app has its own internal name, display name, description, and icon, all stored server-side. Developers upload this data well before launch so it’s ready to go live the moment a game ships or is announced. The data is supposed to stay invisible to outside tools until a publisher flips a visibility setting. When that setting is misconfigured, missing, or briefly toggled the wrong way during a backend update, tracking sites that are constantly scanning for new entries pick it up within minutes.
This is precisely why achievement leaks tend to be more damaging than typical leaks sourced from rumors or industry insiders: the text comes directly from the developer, unfiltered and unreviewed for public consumption, and it is often written with story spoilers in mind since the people composing it assume no one outside the studio will read it before launch.
Why Steam’s Backend Keeps Leaking: A Pattern, Not an Accident
This is not the first time achievement or metadata leaks have exposed unannounced Steam titles before their publishers were ready, as TheSixthAxis also noted in its own rundown of the exposed titles. SteamDB in particular has a long track record of surfacing unreleased ports, beta branch names, and DLC listings months ahead of schedule, simply by monitoring public depot and app-ID changes that Valve’s systems expose by design for update-delivery purposes.
What sets the current incident apart is scale. Previous leaks of this kind typically affected a handful of titles at once, usually tied to a single publisher’s backend mistake. This event, by every count reported so far, spans dozens of publishers simultaneously, which points toward either a platform-wide change on Valve’s side that altered how visibility flags are enforced, or a bulk configuration tool used by multiple studios that shared the same flaw. Neither Valve nor any of the affected publishers has offered a technical explanation as of this writing.
For an industry that spends years and enforces strict NDAs specifically to control when and how a game’s story and setting are revealed, a single backend misconfiguration undoing that work in one afternoon is a stark reminder of how much of modern game marketing rests on infrastructure most players never think about.
Atlus and Square Enix’s Silence
As of this writing, neither Atlus nor Square Enix has issued a public statement confirming or denying the leaked content. That silence is fairly standard practice: publishers rarely comment on unverified leaks in the first 24 to 48 hours, both to avoid confirming details before an official reveal and to give internal teams time to assess how the exposure happened and whether any legal or technical response is needed.
The lack of denial is itself notable to industry watchers. When achievement lists or store listings turn out to be fake or outdated placeholder data, publishers and their PR teams have historically been quick to knock down false rumors, particularly on high-profile franchises like Persona and Kingdom Hearts. The absence of any pushback so far is being read by several outlets as tacit, if unofficial, confirmation that the leaked material is authentic.
Market Impact: What a Leak Like This Costs Publishers
Marketing timelines for major franchise entries are built around controlled reveal moments, usually tied to trade shows, dedicated showcases, or anniversary events, all designed to maximize press coverage and pre-order momentum in a single coordinated window. A leak of this size undercuts that entirely. Square Enix now faces the choice of either accelerating its Kingdom Hearts IV marketing plan to get ahead of a story it did not choose to tell yet, or sticking to its original schedule while fans and press openly discuss details it hasn’t confirmed.
Neither option is free. Moving up a reveal means compressed asset production, rushed trailers, and less lead time for the kind of sustained hype cycle that modern AAA marketing budgets are built around. Staying quiet risks ceding the narrative to leak coverage, fan speculation, and potentially inaccurate secondary reporting that builds on the initial leak with its own guesses layered on top. For Atlus, a company that has built the Persona brand partly on tightly controlled, stylish reveal trailers, an unplanned, text-only spoiler dump is close to the opposite of how it typically wants Persona 6 introduced to the public.
There’s also a quieter cost: player trust in Steam’s own systems. Achievement lists are meant to be one of the platform’s most reliable, developer-controlled features. When they leak sensitive story content en masse, it puts pressure on Valve to explain what went wrong on the infrastructure side, not just on the affected publishers.
Reported Game Counts by Outlet
| Outlet | Reported Game Count | Key Detail Emphasized |
|---|---|---|
| Forbes | Well over 125 | Kingdom Hearts IV’s Star Wars world; Persona 6 dungeon and mechanic names |
| GamingBible | At least 145 | 15 titles described as fully unannounced |
| GamerFuzion | Roughly 50 at initial discovery | Exact achievement counts for Persona 6 and Kingdom Hearts IV |
| Regional outlets (Dungen.ru, IXBT Games) | 85 | Extended title list including remasters and unannounced sequels |
| Gematsu | Not specified | Confirmed “unannounced worlds” and “unannounced story information” tags |
Persona 6 vs. Kingdom Hearts IV: Leaked Achievement Data
| Detail | Persona 6 | Kingdom Hearts IV |
|---|---|---|
| Total achievements leaked | 48 | 50 |
| Hidden achievements | 12 | 2 |
| Setting/world detail revealed | Yokohama; organization called Hex | Toy Box, Scala ad Caelum, a Star Wars-themed world |
| Notable character/system reference | Velvet Room attendant | First confirmed use of Star Wars characters in the series |
| Publisher | Atlus | Square Enix |
| Official statement as of Sept. 9, 2026 | None | None |
How Valve, PlayStation, and Xbox Handle Pre-Release Data Differently
Steam’s open, third-party-friendly API structure is precisely what makes it useful to millions of players who rely on tools for library tracking, price history, and achievement completion, and it’s also what makes it more exposed to this category of leak than console-first storefronts. Sony’s PlayStation Network and Microsoft’s Xbox backend both expose considerably less granular pre-release metadata to outside developers, largely because their platform APIs are more tightly gated behind partner agreements rather than open polling.
That doesn’t mean console platforms are immune to leaks, trophy lists and achievement data have surfaced ahead of schedule on PlayStation and Xbox before, but the frequency and scale tend to be smaller because fewer independent tools have the same level of always-on access to backend listings that sites like SteamDB and Exophase have built specifically around Steam’s ecosystem. Valve’s openness is a deliberate trade-off that benefits the broader PC gaming community in normal circumstances, and becomes a liability the moment a visibility flag fails.
Historical Context: A Platform Built on Accidental Reveals
Steam has effectively become the industry’s unofficial leak channel over the past decade, not because Valve wants it to be, but because the platform’s backend transparency is unusually generous compared to other storefronts. SteamDB alone has a long history of surfacing unreleased ports, unannounced remasters, and DLC codenames well before their publishers were ready to talk about them, simply by tracking public changes to depot files and app listings that Valve’s update-delivery systems expose by necessity.
Achievement leaks specifically carry more narrative risk than depot or SKU leaks, because achievement text is written in plain language meant for players, describing plot beats, character names, and world names in a way a cryptic file path or SKU number never would. That’s the core reason this particular incident has generated so much coverage in such a short window: it isn’t just confirming that Persona 6 and Kingdom Hearts IV exist and are in active development, something largely assumed already, it’s revealing specific creative choices neither Atlus nor Square Enix had shared publicly.
What Happens Next: Five Predictions
- Square Enix likely accelerates its Kingdom Hearts IV communication plan in the coming weeks rather than let leak-driven coverage dominate the narrative heading into any planned showcase.
- Atlus probably stays quieter for longer, given Persona reveals have historically leaned on polished trailers rather than damage-control statements, meaning an official Persona 6 announcement may not follow immediately.
- Valve faces renewed scrutiny over how achievement and store-page visibility flags are enforced, and a technical postmortem or quiet backend fix is plausible in the coming weeks even without a public statement.
- Expect at least one more wave of secondary leaks as archivists comb through cached Exophase pages and share additional titles that weren’t caught in the first 24 hours of coverage.
- Other publishers with games caught in the same leak window, including those behind Gears of War: E-Day and Silent Hill: Townfall, will likely face pressure to comment even though the leaked content for those titles is less spoiler-heavy than Persona 6 or Kingdom Hearts IV.
Why This Matters Beyond Two Franchises
It’s tempting to read this story purely as spoiler news for Persona and Kingdom Hearts fans, but the underlying issue is bigger than either franchise. Achievement systems are a core, trusted feature of digital storefronts, used by hundreds of millions of players to track progress and completion. When that same system becomes a vector for exposing unreleased creative work across dozens of publishers simultaneously, it raises a legitimate platform-integrity question that goes well beyond any single game’s marketing plan. It also arrives in a week already packed with unplanned reveals, following Nintendo’s own leak covering Smash Bros. and Nintendogs and a PlayStation State of Play that confirmed a release date for Final Fantasy VII Revelation. Square Enix has also been building momentum around Final Fantasy Resonance’s Switch 2 demo, making this an unusually leak-heavy stretch for the publisher.
It also illustrates something game developers have quietly known for years: the line between “in development” and “public” is thinner than most players assume, and it’s often enforced by nothing more than a single configuration flag sitting in a storefront’s backend, unwatched, until it isn’t. For more coverage of how platform storefronts, handhelds, and cloud services are shaping the industry heading into next year, see this site’s broader gaming coverage hub.
Frequently Asked Questions
What exactly leaked in the September 2026 Steam achievement leak?
Full or partial Steam achievement lists for dozens of unreleased and unannounced games surfaced on the third-party tracking site Exophase, starting around September 8, 2026. The lists include achievement names, descriptions, and hidden-achievement counts for titles including Persona 6 and Kingdom Hearts IV.
Is Persona 6 officially confirmed?
Atlus has not issued an official announcement or statement confirming Persona 6’s existence, achievement list, or any story details as of this writing. The information comes solely from the leaked Steam data reported by outlets including Gematsu, Forbes, and GamerFuzion.
Does the leak confirm Kingdom Hearts IV includes Star Wars?
According to Forbes’ reporting on the leaked achievement list, the data points to a Star Wars-themed world in Kingdom Hearts IV, which would mark the first time the series has used Star Wars characters. Square Enix has not confirmed this officially.
How many games were affected by the leak in total?
Reports vary. GamingBible cited at least 145 games, Forbes reported well over 125, an initial GamerFuzion report cited roughly 50, and other outlets cited 85. The discrepancy stems from differing methodologies for what counts as a fully or partially exposed listing.
How did the achievement lists leak in the first place?
Reporting points to a Steam backend issue that made normally hidden achievement metadata readable through Steam’s public API layer. Third-party tracking sites like Exophase, which continuously scan for new achievement data, indexed and published the information before it could be pulled down.
Have Atlus or Square Enix responded to the leak?
As of this writing, neither publisher has issued a public statement confirming or denying the leaked material.
Is this the first time Steam achievements have leaked unannounced games?
No. Sites like SteamDB have a long history of surfacing unreleased ports, DLC names, and beta branches ahead of official announcements by monitoring public backend changes. What sets this incident apart, according to multiple outlets, is the sheer number of publishers and games affected simultaneously.
Where can I see the full list of leaked games?
Outlets including Beebom and GamerFuzion have compiled running lists of titles identified in the leak, though the exact count continues to change as more entries are archived or removed from public view.