Illustration: Actor claims sale of 84,000 Riot Games customer records
Riot Games Base de clientes da Riot Games · Breach

Actor claims sale of 84,000 Riot Games customer records

· 1 min read

A threat actor on a dark web forum claims to hold about 84,000 records tied to Riot Games customers, the studio behind League of Legends and Valorant, spanning 2024 to 2026. The dataset would include account details, full names, contact information and purchase history. No sample has been independently verified so far.

WhatsApp LinkedIn X
MediumBreachNo software to update
In this article
  1. What happened
  2. Why it matters
  3. What to do
  4. For the technical team
  5. Timeline
  6. Sources

What happened

A threat actor on a dark web forum claims to sell about 84,000 customer records of Riot Games, the studio behind League of Legends and Valorant. The lot would span 2024 to 2026 and include full names, contact details, purchase history and transactions. No sample has been independently verified and Riot has not commented.

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Why it matters

This is an unconfirmed claim with no public proof so far. If the data is real, purchase and transaction history makes convincing phishing and payment fraud lures against players, such as fake billing-problem or account-ban emails.

What to do

Monitor Riot's official channels for confirmation or denial. Advise players to turn on MFA and treat billing or ban emails with suspicion. No patch action applies at this time.

For the technical team

Affected
Riot Games Base de clientes da Riot Games, estúdio de League of Legends e Valorant · Riot Games customer database (claimed); records spanning 2024 to 2026.
Exploitation
No sample independently checked; unconfirmed claim reported by @DailyDarkWeb. Riot Games has not commented.
Fix
Not applicable; alleged leak requires no fix.
More details
Claimed data: account details, full names, country and contact information, purchase history, transaction details. The reporter warns of fake billing-problem or account-ban emails and recommends enabling MFA.

Timeline

  1. Incident opened.

Sources 1 source

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how. After signing up you get the full feed.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click