Divine Skins: Have I Been Pwned’s Post

Divine Skins Data Breach Exposes 105K League of Legends Users’ Data

This week, Divine Skins, a third-party service offering custom League of Legends skins, suffered a data breach exposing 105,000 email addresses and usernames, along with users’ purchase histories. The incident was confirmed by security researcher Troy Hunt’s Have I Been Pwned platform, which tracks compromised credentials.

Approximately 50% of the exposed emails were already circulating in previous breaches, including those from LinkedIn, indicating potential reuse of credentials across platforms. The breach highlights ongoing risks associated with third-party gaming services, particularly those handling user payment data.

While the full scope of the incident remains under investigation, the exposure of purchase histories raises concerns about targeted phishing or fraud attempts. Divine Skins has not yet issued a public statement regarding the breach or mitigation efforts. Users of the service are advised to monitor accounts for suspicious activity.

Source: https://www.linkedin.com/feed/update/urn:li:activity:7438817894718672898

Divine Skin Creations cybersecurity rating report: https://www.rankiteo.com/company/divine-skin-creations

"id": "DIV1773555823",
"linkid": "divine-skin-creations",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '105,000',
                        'industry': 'Gaming',
                        'name': 'Divine Skins',
                        'type': 'Third-party gaming service'}],
 'customer_advisories': 'Users advised to monitor accounts for suspicious '
                        'activity',
 'data_breach': {'number_of_records_exposed': '105,000',
                 'personally_identifiable_information': 'Email addresses, '
                                                        'usernames',
                 'sensitivity_of_data': 'High (50% of exposed emails were '
                                        'already in previous breaches)',
                 'type_of_data_compromised': 'Email addresses, usernames, '
                                             'purchase histories'},
 'description': 'Divine Skins, a third-party service offering custom League of '
                'Legends skins, suffered a data breach exposing 105,000 email '
                'addresses and usernames, along with users’ purchase '
                'histories. The incident was confirmed by security researcher '
                'Troy Hunt’s Have I Been Pwned platform.',
 'impact': {'data_compromised': 'Email addresses, usernames, purchase '
                                'histories',
            'identity_theft_risk': 'Potential targeted phishing or fraud '
                                   'attempts'},
 'investigation_status': 'Under investigation',
 'lessons_learned': 'Ongoing risks associated with third-party gaming services '
                    'handling user payment data; credential reuse across '
                    'platforms',
 'recommendations': 'Users advised to monitor accounts for suspicious activity',
 'references': [{'source': 'Have I Been Pwned'}],
 'title': 'Divine Skins Data Breach Exposes 105K League of Legends Users’ Data',
 'type': 'Data Breach'}