League of Legends Data Breach

What happened?

In June 2012, the multiplayer online game League of Legends suffered a data breach . At the time, the service had more than 32 million registered accounts and the breach affected various personal data attributes including "encrypted" passwords. In 2018, a 339k record subset of the data emerged with email addresses, usernames and plain text passwords, likely cracked from the original cryptographically protected ones.

When did it happen?

The breach date in the public record is June 11, 2012. The record was added to the catalogue on July 28, 2018 and last updated there on July 28, 2018.

What information was reported as exposed?

• Email addresses
• Passwords
• Usernames

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with League of Legends or used leagueoflegends.com around June 11, 2012. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.