Des Plaines River Casino customer data compromised in cyber attack
Rivers Casino in Des Plaines, Illinois, said Thursday it suffered a cyberattack this summer that exposed the private information of an unknown number of customers and employees. The casino said in a statement that although the attack occurred "on or about August 12," it was not discovered until early November.
Information at risk includes names, contact information (such as phone numbers and email addresses), and driver's license and identification numbers.
Rush Street Gaming warned that hackers may have also gained access to the financial accounts, tax IDs, Social Security numbers and passport numbers of a limited number of customers.
Passwords are particularly valuable to hackers, who can sell them in bulk to fraudsters on the dark web for use in "credential stuffing" schemes. Fraudsters use stolen credentials to access accounts on different platforms where the user has the same password.
Who is affected
Rivers declined to say how many customers may have been affected by the breach. Customers were also affected after the casino had 273,000 visits and nearly 300,000 bets placed at its sportsbook in the month before the attack, according to Illinois Gaming Board records.
The casino said it does not believe the issue involved customer passwords or credit card information.
"Des Plaines Casinos employs robust security protocols," the casino wrote in a statement. "Unfortunately, we recently became aware of a data security incident. When Rivers learned of the incident, he took immediate action to contain the threat and secure our systems to avoid disruption to our operations or the services we provide to our customers. cause any disturbance."
It added that it had hired a company specializing in cybersecurity to investigate the breach.
Attack Wave
It is unclear who is behind the attack, which is the latest in a series of high-profile cybercrimes targeting casinos. In September, the systems of MGM Resorts and Caesars Entertainment were hacked, causing severe damage, with MGM in particular refusing to pay the ransom.
Caesars regained access to its systems after paying about $15 million to restore normal service. After days of disruption, MGM eventually suppressed the threat, causing an estimated $100 million in damage.
The attacks have been attributed to a hacking group known as "Scattered Spider," "Octo Tempest," or "The Com," which is currently under investigation by the FBI.
Earlier this week, several cybersecurity executives from companies tracking Dispersed Spiders complained that although members of the agency's collective were "known," no arrests had been made.
Read also:
- Football 101: What is relegation in football?
- California National Indian Gaming Association. Officially opposed to sports betting
- Ozark Casino continues to support Missouri
- Las Vegas tourist allegedly kidnapped and murdered by basketball player
Source: www.casino.org
