Riotgames | Combo.txt

: While a major 2023 social engineering attack exfiltrated source code for League of Legends and Teamfight Tactics , Riot maintained that player data remained secure. However, smaller-scale leaks continue to surface, such as an alleged database sale in January 2026 . Risks and Security Measures

: Security experts recommend using services like Have I Been Pwned to see if your email appears in any public "combo.txt" dumps. riotgames combo.txt

: These lists are rarely from a single direct breach of Riot's servers. Instead, they are often aggregated from various third-party data leaks (e.g., the ALIEN TXTBASE leak in 2025) where players used the same password for multiple services. : While a major 2023 social engineering attack

: Bad actors use automated tools to test these "combo" pairs against Riot’s login portal. Successful logins are flagged as "active" or "cracked" and sold for as little as $2 on black markets. : These lists are rarely from a single