Add League of Legends to recent hacking victims. Sean Stewart reports:
Riot Games confirmed the breach with a post on the League of Legends forums, telling members “we’re sorry to share that hackers accessed some player account information”. The information was stolen from two databases in Europe, EU West and EU Nordic & East. Personal information such as, “email address, encrypted account password, summoner name, date of birth, and – for a small number of players – first and last name and encrypted security question and answer” are being reported by Riot Games.
Don’t get too excited about the encryption. An FAQ on the LoL site says:
Even though we store passwords in encrypted form only, our security investigation determined that more than half of the passwords were simple enough to be at risk of easy cracking.