League of Legends: Change Your Passwords!
Are you a League of Legends player? You better login and change your passwords fast! It turns out that North American accounts have been compromised. In a recent email to their player base, Riot Games announced that user names, email addresses, salted password hashes, and some first and last names were pulled. Even though the password files themselves are inaccessible, players that have easy passwords might be vulnerable to account theft. If you’re uneasy, you should head over and change your password information now.
Over 110k transaction records from 2011 that contained hashed and salted credit card numbers were also accessed. Riot has been (or will be) contacting those players directly to make them aware of the security breach.
It’s refreshing to see companies take security so seriously. As a way to help beef up and minimize additional risks in the future, they’re working on additional methods in safeguarding our precious accounts.
- Email verification: All new registrations and account changes need to be associated with a valid email address (and all existing players have to have a valid one).
- Two-factor authentication: Any change to your account email or password requires verification via email or mobile SMS message.
Riot Games is the latest in a string of security breaches among game developers. Crysis 3 developer Crytek took down four of its own websites earlier this month after they had been hacked.