Hackers steal players' passwords of 'League of Legends' online game

Hackers broke into the online database of the online real-strategy game "League of Legends," with the game's publisher admitting the data breach this weekend.

 

Riot Games said its initial findings show the data breach may have affected player data in the European Union West, Nordic and East databases.

 

"The most critical data accessed included email address, encrypted account password, summoner name, date of birth, and – for a small number of players – first and last name and encrypted security question and answer," it said.

 

But it said absolutely no payment or billing information of any kind was included in the breach.

 

Still, Riot Games said it is emailing all players on these platforms, as a security precaution.

 

On the other hand, it said that while it stores passwords in encrypted form only, its investigation showed more than half of the passwords were simple enough to be at risk of easy cracking.

 

For now, it said it has fixed the specific security issue that hackers exploited.

 

"Over the next 24 hours, we'll be notifying all EUW and EUNE players via email; although only a portion of players might have been affected, we consider broader notification a good security precaution," it said.

 

It added it will continue to invest in security measures, including password hashing and data encryption, state-of-the-art firewalls, SSL, security ninjas, and other security measures to make players' data safer.

 

"We've been humbled by this experience and know that nothing guarantees the security of Internet-connected systems such as League of Legends. We can simply promise to try our very best to protect your data," it said.

 

Riot Games also advised players to change their account passwords soonest, and use a good password. — ELR, GMA News