Have I Been Pwned adds old database of 340,000 League of Legends accounts

Have I Been Pwned, a service provided by security researcher Troy Hunt, has added the email addresses, usernames and passwords of 339,487 League of Legends accounts to its database so people can check if their information is in it.

The service reports that it concerns data that were stolen in 2012. According to administrator Hunt is the database verified by Riot Games, the company behind the game League of Legends. The database contains nearly 340,000 records, where the passwords would be in plaintext. Hunt suspects that the database that has now appeared online is a cracked part of the data originally stolen. About 67 percent of the added data was already in HIBP.

Six years ago, it was revealed that hackers had stolen the database containing data of European League of Legends players. This did not concern payment details, but e-mail addresses, encrypted passwords and dates of birth. In a smaller number of cases, it also involved first and last names, and the encrypted questions and answers that can be used in account recovery.

Riot Games did not disclose how many players were affected by the data breach at the time. When the incident occurred, there were 32.5 million registered players. Have I Been Pwned is a service where people can check if their email address is in one of the many leaked databases of online services. In addition, they can check whether their password exists in one of those databases. It is also possible to set automatic alerts.