Riot Games
takes to Twitter with details on its investigation of reports it was
recently breached in a cyber attack. Proving this is the perfect format for such
messaging, the update only spans seven tweets:
As promised, we wanted to
update you on the status of last week’s cyber attack. Over the weekend, our
analysis confirmed source code for League, TFT, and a legacy anticheat platform
were exfiltrated by the attackers.
Earlier this week, systems in our development environment were
compromised via a social engineering attack. We don’t have all the answers right
now, but we wanted to communicate early and let you know there is no indication
that player data or personal information was obtained.
Today, we received a ransom email. Needless to say, we won’t pay.
While this attack disrupted our build environment and could cause issues in the
future, most importantly we remain confident that no player data or player
personal information was compromised.
Truthfully, any exposure of source code can increase the likelihood of new
cheats emerging. Since the attack, we’ve been working to assess its impact on
anticheat and to be prepared to deploy fixes as quickly as possible if
needed.
The illegally obtained source code also includes a number of experimental
features. While we hope some of these game modes and other changes eventually
make it out to players, most of this content is in prototype and there’s no
guarantee it will ever be released.
Our security teams and globally recognized external consultants continue to
evaluate the attack and audit our systems. We’ve also notified law enforcement
and are in active cooperation with them as they investigate the attack and the
group behind it.
We’re committed to transparency and will release a full report in the future
detailing the attackers’ techniques, the areas where Riot’s security controls
failed, and the steps we’re taking to ensure this doesn’t happen again.
We’ve made a lot of progress since last week and we believe we’ll have things
repaired later in the week, which will allow us to remain on our regular patch
cadence going forward. The League and TFT teams will update you soon on what
this means for each game.