Riot Games, the developer behind League of Legends, has confirmed a “social engineering attack” on their development environment has affected its ability to release content and may slow the rollout of patches across multiple games. They’ve also confirmed the source code across multiple games has been stolen.
In an update through a series of tweets yesterday, Riot Games confirmed that the attackers exfiltrated the source code for League of Legends, Teamfight Tactics, and a legacy anti-cheat platform.
As promised, we wanted to update you on the status of last week’s cyber attack. Over the weekend, our analysis confirmed source code for League, TFT, and a legacy anticheat platform were exfiltrated by the attackers.
— Riot Games (@riotgames) January 24, 2023
Riot have noted that the release of any source code could lead to an increase of new cheats emerging, which could spell trouble for their own anti-cheat mechanisms. They are still trying to understand the full impact of the attack but have said they will be working as quickly as possible to deploy fixes when needed.
Riot Games also confirmed in the tweets that they have started to receive ransom emails, which they claim to have no intention of paying. The company said it is confident that no player data or player personal information has been compromised.
The stolen code also includes some experimental features that had not yet been released to the public.