Divine Skins, a League of Legends custom skins service, disclosed a data breach affecting over 105,000 users in March 2026.
What happened
According to HIBP, Divine Skins suffered an unauthorized access incident in March 2026. The service disclosed the breach via its Discord server, stating that an unauthorized third party accessed part of its systems, deleted all skins from the database, and exposed user data.
What was exposed
The breach exposed email addresses, usernames, and a history of purchases made by users.
Who is affected
Approximately 105,814 user accounts were affected by the incident.
What to do now
Users of Divine Skins should monitor their email accounts for suspicious activity and consider changing passwords on other services if they reused credentials. Review purchase history for any unauthorized transactions.