North American League of Legends accounts have been compromised, according to League of Legends developer Riot Games. The information accessed includes usernames, email addresses, salted password hashes*, and some first and last names.
To help protect accounts from being hacked, Riot is requiring all North American users to create new, more complex passwords. Additionally, they’re working on extra security for accounts in the form of email verification. All accounts will have to be associated with a valid email address, and all changes to accounts will require either email or mobile verification.
Riot is also investigating the potential compromise of transaction records from 2011 that contain salted credit card hashes. Riot is emailing people who might be affected by this breach, so if you made purchases on League of Legends with a credit card in 2011 keep an eye out for an email from Riot Games.
*Note: This means that the passwords accessed are unreadable to whoever accessed them.