As of last week, Riot Games had been breached. The attack “temporarily disrupted our capacity to distribute content,” the California-based company said, adding that it will “impact our forthcoming patch cadence across many titles.” This includes the impending 13.2 updates for League of Legends and Teamfight Tactics.
We now know the full extent of the devastation that these hackers caused. Riot has issued a statement on Twitter confirming that hackers have stolen the source code for both League of Legends and Teamfight Tactics and have threatened to publish it online unless the company pays a ransom.
Analysis done over the weekend verified that the attackers had stolen the source code for League, [Teamfight Tactics], and an older anti-cheat platform, Riot Games said. We were hit with a ransom email today. We, of course, refuse to pay.
We are sure that no player data or personal information was compromised despite the attack disrupting our build environment and maybe causing issues in the future.
As promised, we wanted to update you on the status of last week’s cyber attack. Over the weekend, our analysis confirmed source code for League, TFT, and a legacy anticheat platform were exfiltrated by the attackers.
— Riot Games (@riotgames) January 24, 2023
After the source code breach, “new cheats appearing” appears to be Riot’s primary concern. The developer has stated that it is still evaluating the potential impact this could have on League’s current anti-cheat suite and will deliver updates “if warranted.”
Additional issues for Riot include the loss of development on unreleased game modes and features, along with source code theft. In its statement, Riot made it plain that even if the hackers provide this source code, there is “no assurance it will ever be released” in-game, even though the features and game modes could emerge online.
Riot is collaborating with law enforcement and third-party consultants to investigate the hack and, hopefully, identify the perpetrators. We will be on the lookout for the stolen source code should it appear on the deep web.