League of Legends online game hacked

Players the popular online game "League of Legends" may want to reset their account passwords, after hackers managed to access the data of account holders in North America.

 

Riot Games admitted this in a blog post, where it also said some 120,000 transaction records from 2011 that contained hashed and salted credit card numbers may have been accessed.

 

"What we know: usernames, email addresses, salted password hashes, and some first and last names were accessed. This means that the password files are unreadable, but players with easily guessable passwords are vulnerable to account theft," Riot Games' Marc Merrill and Brandon Beck said.

 

They suggested the 120,000 transaction records that could have been accessed had been dormant since July 2011.

 

However, they said they are "taking appropriate action to notify and safeguard affected players."

 

"We will be contacting these players via the email addresses currently associated with their accounts to alert them. Our investigation is ongoing and we will take all necessary steps to protect players," they added.

 

Also, they said they will require players with accounts in North America to beef up their passwords.

 

The added security measures may also include two-factor authentication, where changes to account email or password "will require verification via email or mobile SMS." — TJD, GMA News