updated 03:09 pm EDT, Wed August 21, 2013
Around 120,000 credit card transactions taken from Riot Games servers
Servers used by Riot Games for popular online multiplayer game League of Legends have been hacked. Personal details for accounts stored on the North America region servers were accessed in the intrusion, along with credit card numbers and other payment information for approximately 120,000 transactions from 2011.
Usernames, e-mail addresses, first and last names, as well as salted password hashes, have been seized in the attack, according to a company blog post, though the total number of affected accounts remains unknown. For the payment intrusion, records of hashed and salted card numbers were taken, though the company suggests that the potential damage is limited due to the fact that the payment system attacked has not been used since July of 2011.
Users affected by the attack will be contacted by the developer, and all accounts registered to the North America servers will be required to change their passwords over the next 24 hours. Riot will also be adding e-mail verification to new account registrations, as well as requiring existing players to provide a working address, and a new two-factor authentication system will be put in place in the future.