Riad Games is a leading developer and publisher of popular titles such as "League of Legends," "Valorant," "Legends of Runeterra," and "League of Legends: Wild Rift," as well as "League of Legends. RIAT Games, Inc. is a leading developer and publisher of games for the gaming industry. In addition to its headquarters in Los Angeles, the company has offices in more than 18 countries and territories, including Spain, Germany, France, the United Arab Emirates, and Japan. The company is also developing a new fighting game code-named "Project L" and new services such as MMORPG, and its scale is only growing. On January 21, 2023 (Japan time), Raiatto Games announced that it had suffered a social engineering attack. The following is a summary of the circumstances along with a follow-up announcement made on Wednesday, January 25, 2023.
ライアットゲームズがAWSと提携!新プロジェクト「Project Stryker」でeスポーツ配信番組制作強化へ
Raiatto Games Victim of Social Engineering Attack
Earlier this week, systems in our development environment were compromised via a social engineering attack. We don’t have all the answers right now, but we wanted to communicate early and let you know there is no indication that player data or personal information was obtained.
— Riot Games (@riotgames) January 20, 2023
On Saturday, January 21, 2023 (Japan time), RYAT Games reported a social engineering attack on its development environment systems. First of all, we would like to emphasize that there is no evidence that any player data or personal information was obtained.
Social engineering refers to methods other than information and communication technology used to obtain passwords and other information to break into a network. In other words, unlike hacking or cracking as commonly imagined, it takes advantage of human psychological gaps, weaknesses, or behavioral errors. Examples include "pretending to be an administrator on the phone and asking for passwords," "looking over one's shoulder to steal passwords," and "going through one's trash. For more information, please refer to the Ministry of Internal Affairs and Communications' information security website.
Actual Damage
As promised, we wanted to update you on the status of last week’s cyber attack. Over the weekend, our analysis confirmed source code for League, TFT, and a legacy anticheat platform were exfiltrated by the attackers.
— Riot Games (@riotgames) January 24, 2023
The social engineering attack exposed the source code of "League of Legends" and "Teamfight Tactics" as well as previous anti-cheat platforms. The perpetrators also revealed that they received an email demanding a ransom. Of course, Riat Games has not responded to this demand.
The biggest concern about the release of these source codes is the "emergence of new cheats. Since the attack, Riat Games has been assessing the impact on anti-cheaters and preparing fixes if necessary.
The leaked source code includes many changes and prototypes of new game modes, but RYAT Games also emphasizes that these changes may not actually be released.
Future Policies
Riat Games' security team and external consultants continue to analyze the attack and audit its own systems. We have also notified legal authorities and are actively cooperating with them to investigate the attack and the group behind it.
RYAT Games plans to release a detailed report summarizing the techniques used by the perpetrators, the failures in RYAT Games' security controls, and measures to prevent a recurrence.
Impact on the Patch Cycle
Many of the titles developed by RYAT Games are regularly updated (patch releases), but there was concern that the damage could delay these content releases.
Since a lot of progress has been made between the damage and today, it has also been announced that the situation will be repaired by the end of this week (week of January 23, 2023), allowing us to maintain a regular update cycle in the future.
"League of legends" Patch Notes
The release of patch 13.2, scheduled for Wednesday, January 25, 2023 Japan time, has been cancelled. Instead, it will be released as hot fix 13.1B on Friday, January 27, 2023 JST. These will contain most of the contents of patch 13.2, which was originally planned. Please refer to the " League of Legends" patch notes 13.1B for a complete list of changes.
"Teamfight Tactics" mid-patch update
TFTパッチノート13.1 ミッドパッチアップデート
?https://t.co/DH8z0c7LZp現在発生中の問題によりパッチのリリースに支障が生じており、パッチ13.2全体がリリース不可となったため、パッチ13.2で予定していたバランス関係の変更の大部分をミッドパッチアップデートとして実装することにしました。 pic.twitter.com/TfUElUVg64
— チームファイト タクティクス (@PlayTFTJP) January 24, 2023
Patch 13.2 has been cancelled, but will be implemented as a mid-patch update on Thursday, January 26, 2023 Pacific Standard Time. Any changes that were not implemented in time for patch 13.2 will be added in patch 13.3 or released as a hot fix after release functionality is restored. Please refer to the " Teamfight Tactics" patch note 13.1 for a detailed description of the changes.