A Steam API vulnerability allowed achievement tracking site Exophase to scrape unreleased achievements for hundreds of unannounced games, including Kingdom Hearts 4 and Persona 6, exposing major spoilers and unconfirmed titles. Exophase's owner confirmed the leak resulted from a mistake on Valve's end that lifted access restrictions. This marks the second significant security incident for Valve in two weeks.