Hackers Attempt to Extort Riot Games Following Security Breach

Riot Games experienced a significant security breach in January 2023, resulting in the exfiltration of source code for League of Legends, Teamfight Tactics, and a legacy anticheat platform. The incident, which originated from a social engineering attack, led to an extortion attempt by the perpetrators who demanded a ransom payment in exchange for not releasing the stolen proprietary data. Riot Games officially refused to comply with these demands.

The company confirmed that while the breach disrupted its internal build environment and necessitated delays in scheduled game updates, no player data or personal information was compromised. However, the exposure of source code presents long-term risks, specifically regarding the potential for new cheats to be developed for its titles. The stolen data also included various experimental features and prototypes, though the company noted that there was no guarantee these would ever reach the public.

In response to the incident, Riot Games engaged with law enforcement agencies, including the FBI, and collaborated with external security consultants to audit its systems and assess the impact of the breach. The company committed to a transparent investigation process, promising a future report detailing the attackers' techniques and the specific security failures that allowed the intrusion. By late January 2023, the developer reported significant progress in repairing its systems, aiming to restore its regular patch cadence and address any vulnerabilities in its anticheat infrastructure.