Riad Games is a leading developer and publisher of popular titles such as "League of Legends," "Valorant," "Legends of Runeterra," and "League of Legends: Wild Rift," as well as "League of Legends. RIAT Games, Inc. is a leading developer and publisher of games for the gaming industry. In addition to its headquarters in Los Angeles, the company has offices in more than 18 countries and territories, including Spain, Germany, France, the United Arab Emirates, and Japan. The company is also developing a new fighting game code-named "Project L" and new services such as MMORPG, and its scale is only growing. On January 21, 2023 (Japan time), Raiatto Games announced that it had suffered a social engineering attack. The following is a summary of the circumstances along with a follow-up announcement made on Wednesday, January 25, 2023.
Raiatto Games Victim of Social Engineering Attack
On Saturday, January 21, 2023 (Japan time), RYAT Games reported a social engineering attack on its development environment systems. First of all, we would like to emphasize that there is no evidence that any player data or personal information was obtained.
Social engineering refers to methods other than information and communication technology used to obtain passwords and other information to break into a network. In other words, unlike hacking or cracking as commonly imagined, it takes advantage of human psychological gaps, weaknesses, or behavioral errors. Examples include "pretending to be an administrator on the phone and asking for passwords," "looking over one's shoulder to steal passwords," and "going through one's trash. For more information, please refer to the Ministry of Internal Affairs and Communications' information security website.
Actual Damage
The social engineering attack exposed the source code of "League of Legends" and "Teamfight Tactics" as well as previous anti-cheat platforms. The perpetrators also revealed that they received an email demanding a ransom. Of course, Riat Games has not responded to this demand.
The biggest concern about the release of these source codes is the "emergence of new cheats. Since the attack, Riat Games has been assessing the impact on anti-cheaters and preparing fixes if necessary.
The leaked source code includes many changes and prototypes of new game modes, but RYAT Games also emphasizes that these changes may not actually be released.
Future Policies
Riat Games' security team and external consultants continue to analyze the attack and audit its own systems. We have also notified legal authorities and are actively cooperating with them to investigate the attack and the group behind it.
RYAT Games plans to release a detailed report summarizing the techniques used by the perpetrators, the failures in RYAT Games' security controls, and measures to prevent a recurrence.
Impact on the Patch Cycle
Many of the titles developed by RYAT Games are regularly updated (patch releases), but there was concern that the damage could delay these content releases.
Since a lot of progress has been made between the damage and today, it has also been announced that the situation will be repaired by the end of this week (week of January 23, 2023), allowing us to maintain a regular update cycle in the future.
"League of legends" Patch Notes
The release of patch 13.2, scheduled for Wednesday, January 25, 2023 Japan time, has been cancelled. Instead, it will be released as hot fix 13.1B on Friday, January 27, 2023 JST. These will contain most of the contents of patch 13.2, which was originally planned. Please refer to the " League of Legends" patch notes 13.1B for a complete list of changes.
"Teamfight Tactics" mid-patch update
Patch 13.2 has been cancelled, but will be implemented as a mid-patch update on Thursday, January 26, 2023 Pacific Standard Time. Any changes that were not implemented in time for patch 13.2 will be added in patch 13.3 or released as a hot fix after release functionality is restored. Please refer to the " Teamfight Tactics" patch note 13.1 for a detailed description of the changes.