Cowboy
TRUSTED VENDOR
- Joined
- Apr 18, 2024
- Messages
- 285
The Ohio Lottery has suffered another cybersecurity incident, revealing the sensitive information of over 500,000 people.
Ohio Lottery detected unauthorized activity in its internal office network, which exposed customers’ personal information.
The information involved includes:
“After an extensive forensic investigation and our manual document review, we learned on April 5th, 2024, that certain files containing your personal information were subject to unauthorized access,” Ohio Lottery said.
There’s no evidence that any personal information accessed has been misused, the organization states.
Ohio Lottery is providing affected customers with 12 months of free credit monitoring and identity theft protection through IDX.
Ohio Lottery is a state lottery run by the Ohio Lottery Commission. It offers various games, including scratch tickets, numbers games, classic lottery, and rolling cash.
According to its website, “One hundred percent of Ohio Lottery profits help support K-12, vocational, and special education programs in Ohio.”
This isn’t the first time that the Ohio Lottery has experienced a cybersecurity incident.
In December 2023 the Ohio Lottery confirmed that it was forced to shut down several key systems to contain a cyber hit that affected how it pays out some prizes.
An attack on Christmas Eve affected an undisclosed number of internal applications, the Ohio Lottery said.
Even though the gaming system was still fully operational, the lottery said that mobile cashing and prize cashing above $599 was unavailable.
The attack was supposedly claimed by the fairly new DragonForce ransomware gang.
The threat actors claimed to have encrypted devices and stolen data, including Social Security numbers and dates of birth. The allegedly stolen files contained information belonging to Ohio Lottery customers and employees.
Ohio Lottery detected unauthorized activity in its internal office network, which exposed customers’ personal information.
The information involved includes:
- Full names
- Social Security numbers
“After an extensive forensic investigation and our manual document review, we learned on April 5th, 2024, that certain files containing your personal information were subject to unauthorized access,” Ohio Lottery said.
There’s no evidence that any personal information accessed has been misused, the organization states.
Ohio Lottery is providing affected customers with 12 months of free credit monitoring and identity theft protection through IDX.
Ohio Lottery is a state lottery run by the Ohio Lottery Commission. It offers various games, including scratch tickets, numbers games, classic lottery, and rolling cash.
According to its website, “One hundred percent of Ohio Lottery profits help support K-12, vocational, and special education programs in Ohio.”
This isn’t the first time that the Ohio Lottery has experienced a cybersecurity incident.
In December 2023 the Ohio Lottery confirmed that it was forced to shut down several key systems to contain a cyber hit that affected how it pays out some prizes.
An attack on Christmas Eve affected an undisclosed number of internal applications, the Ohio Lottery said.
Even though the gaming system was still fully operational, the lottery said that mobile cashing and prize cashing above $599 was unavailable.
The attack was supposedly claimed by the fairly new DragonForce ransomware gang.
The threat actors claimed to have encrypted devices and stolen data, including Social Security numbers and dates of birth. The allegedly stolen files contained information belonging to Ohio Lottery customers and employees.