Divine Skins - Breached Accounts Exposed

Key Findings

* Divine Skins data breach exposed 105,814 user accounts

* Unauthorized third party accessed systems and deleted all skins from database

* Exposed data included email addresses, usernames, and purchase history

* Breach disclosed via Discord server in March 2026

Background

Divine Skins is a custom League of Legends skin service that allows players to modify their in-game character appearances. The platform has been operating for several years, providing unique cosmetic options for players seeking alternative visual styles beyond standard game offerings.

Breach Details

The data breach involved unauthorized system access that resulted in complete database manipulation. The intruder not only extracted user data but also deleted the entire skins database, potentially causing significant disruption to the service's core functionality.

Exposed Information

The compromised dataset included:

* Email addresses

* Usernames

* Complete purchase transaction history

* Potentially unique user identifiers linked to Divine Skins accounts

Potential Impact

Users of Divine Skins may face risks such as:

* Potential email-based phishing attempts

* Exposure of purchasing patterns

* Possible account compromise if email/username combinations are reused on other platforms

Recommended Actions

* Users should change passwords on Divine Skins and related accounts

* Enable two-factor authentication where possible

* Monitor personal email for suspicious communications

* Review recent account activity for unauthorized transactions

Mitigation Efforts

The breach was transparently disclosed through the service's Discord channel, demonstrating a commitment to user communication. However, specific technical details about system restoration or security enhancements were not publicly shared.

Sources

• https://haveibeenpwned.com/Breach/DivineSkins

• https://haveibeenpwned.com/Breach/Baydoner