A series of database leaks continues, this time Riot Games

The new game giant Riot Games has undergone a hacker attack. According to one of the representatives, Tryndamere, their company, using the help of independent information security experts, was able to assess the damage. Hackers gained access to personal information of users stored on European databases. Among the most important leaked information is the email addresses of users, their encrypted passwords, logins, dates of birth, and for a small number of users - names, surnames, and encrypted secret questions with answers. Payment and billing data was not affected.

A spokesman assured the gaming community that the security breach was patched. The investigation of this problem continues. The company also hired specialists to better understand the causes of the perpetrators, as well as for prevention in order to avoid recurring situations. Riot Games is going to continue to invest in security measures, including password hashing, data encryption, modern firewalls, SSL, information security ninjas, and the like.

Riot Games also gave some insights on the analysis of lost information:

• more than half of the passwords are simple and can be easily decoded
• 11 passwords are found more than 10,000 times each (I would like to remind you that the number of all users of the Riot Games product as of November 2011 reached 32.5 million)
• a two-digit percentage of users have a password that is encountered by at least one other person

')
Official attack statement from Riot Games