Riot Games announced on January 21 that its systems had been attacked, but there was no indication that player data or personal information had been stolen. Riot Games said at the time that this temporarily affected their ability to release content and was expected to affect the patching rhythm of several of their upcoming games.
Yesterday evening, Riot Games disclosed an update on last week’s cyber attack. The analysis confirmed that the source code for League of Legends, Genting Games and an anti-cheat platform were stolen by the attackers.
Riot Games revealed that it received a ransom email yesterday, but it “won’t pay for it. Riot said that while the attack disrupted their build environment and could cause problems in the future, they still believe that no player data or personal player information was compromised.
Riot Games noted that any source code compromise would increase the likelihood of new cheating behavior. Since this attack, Riot Games has been evaluating its impact on anti-cheating and is prepared to deploy a fix as soon as needed.
The leaked source code also includes some experimental features. Riot Games said that while they hope that some of these game modes and other changes will eventually be available to players, most of the content is still in the prototype stage and there is no guarantee that it will eventually be released.
The riot of Games also said that its security team and outside consultants will continue to assess the attack and review the system and that the company has notified law enforcement and is actively cooperating with them in their investigation of the attack and the organization behind it.
In addition, Riot Games will release a full report in the future detailing the attacker’s techniques, and the measures Riot is taking to ensure such an incident does not happen again. In the meantime, Riot Games will be working on a fix later this week and will continue to maintain its regular patching pace.
