Riot Games' world-dominating online battling game League of Legends has suffered a security breach that has exposed some users credit card information.
A post on the game's official website is urging players to change their passwords while it investigates the matter.
All that is known is that various North American accounts were accessed, letting the perpetrators see usernames, email addresses, salted password hashes and some first and last names. While these password files are unreadable, players that have easy-to-guess passwords could have their accounts hacked.
Riot Games is also investigating 120,000 transactions that have used stolen details and a payment system Riot has not utilised since July 2011.
"We are taking appropriate action to notify and safeguard affected players," the company wrote.
"We will be contacting these players via the email addresses currently associated with their accounts to alert them. Our investigation is ongoing and we will take all necessary steps to protect players."