"Ohio Lottery Hit by Ransomware, Hackers Claim Theft of Employee and Player Data"

The Ohio Lottery has recently confirmed that it was targeted in a cyberattack, and a ransomware group claims to have stolen a significant amount of information from the organization’s systems.  The Ohio State Lottery informed customers on its website that it had experienced a “cybersecurity event” but assured the public that its gaming system was fully operational.  However, it said it decided to shut down some critical systems to contain the incident.  The Ohio Lottery said tickets can still be purchased, but winning numbers and jackpots for some games are not available on the Ohio Lottery website and mobile app.  In addition, the mobile cashing app and Super Retailer locations are not cashing prizes greater than $599 as a result of the incident.  DragonForce took credit for the attack on December 27.  The ransomware group claims to have stolen over 600 GB of data from the Ohio Lottery, including databases storing over three million records associated with employees and players.  The data allegedly includes names, email and postal addresses, winnings, dates of birth, and social security numbers. 

 

SecurityWeek reports: "Ohio Lottery Hit by Ransomware, Hackers Claim Theft of Employee and Player Data"

Submitted by Adam Ekwall on