Stolen League of Legends source code being ransomed, and Riot Games won’t pay

Riot Games has confirmed that an attack on its development environment last week included the theft of source code for its League of Legends and Teamfight Tactics games, along with a "legacy anticheat platform." The company has received a ransom demand but states that it will not pay.

The release of source code by the attackers, whether publicly or by sale, could have implications for cheat software, providing direct knowledge of the game's mechanisms rather than relying on reverse engineering. Riot acknowledged that the attack, attributed to "social engineering," "could cause issues in the future," but added that it was confident "no player data or player personal information was compromised."

"Truthfully, any exposure of source code can increase the likelihood of new cheats emerging," Riot posted in a reply tweet. "Since the attack, we've been working to assess its impact on anticheat and to be prepared to deploy fixes as quickly as possible if needed." Riot added that the code "includes a number of experimental features," though it's mostly "in prototype and there's no guarantee it will ever be released."