Riot Games hacked, source code held for ransom
Following the news of the developer-publisher’s hack last week, Riot Games revealed that they received a ransom email.
The statement released through official Riot Games social media accounts gave an update on the hacking situation and what was taken from their database. They also assured the player base that no sensitive personal information was leaked and only prototype builds of their titles plus an older anticheat platform were affected.
“As promised, we wanted to update you on the status of last week’s cyberattack. Over the weekend, our analysis confirmed that the source code for League, TFT, and an older anticheat platform were exfiltrated by the attackers.
Today we received a ransom email. Needless to say, we don’t pay.
While this attack disrupted our build environment and may cause problems in the future, it is most important that we remain confident that no player data or player personal information was compromised.
Indeed, any exposure of source code can increase the likelihood of new cheats appearing. Since the attack, we have been working to assess the impact on anticheat and to be prepared to deploy fixes as quickly as possible if necessary.
The illegally obtained source code also includes a number of experimental features. While we hope some of these game modes and other changes will eventually make their way to players, most of this content is in prototype and there is no guarantee that it will ever be released.
Our security teams and globally recognized external consultants continue to evaluate the attack and audit our systems. We have also notified the police and are actively working with them as they investigate the attack and the group behind it.
We are committed to transparency and will release a full report in the future detailing the attackers’ techniques, the areas where Riot’s security controls failed, and the steps we are taking to ensure this does not happen again.
We’ve made a lot of progress since last week, and we think we’ll get things fixed later this week, which will allow us to keep up our regular patching pace going forward. League and TFT teams will update you soon on what this means for each game.”
Last week, Riot Games originally revealed hacked, describing it as a social engineering attack.
“Earlier this week, the systems in our development environment were compromised via a social engineering attack. We don’t have all the answers right now, but we wanted to communicate early and let you know that there is no indication that player data or personal information was obtained.
Unfortunately, this has temporarily affected our ability to release content. While our teams are working hard on a fix, we expect this to impact our upcoming patch cadence across multiple games.
Please bear with us as we work through this and we will keep you updated as we continue our investigation.”