Major Cyberattack Compromises Data of Over 538,000 Ohio Lottery Customers

15.05.2024

The Ohio Lottery has disclosed a significant security breach affecting over 538,000 of its customers, with sensitive personal information being compromised. The breach occurred on Christmas Eve last year, and the investigation, which concluded on April 5, revealed that names and social security numbers were exposed.

Involvement of DragonForce

A ransomware group named “DragonForce” has claimed responsibility for the cyberattack. According to their claims, they accessed and dumped approximately 600GB of data, including 3 million records on the dark web.

This data supposedly includes dates of birth and home addresses, contradicting initial reports from the Ohio Lottery which stated that there was no evidence of misuse of the stolen data.

Impact on Lottery Operations

The cyberattack had a significant impact on the Ohio Lottery’s operations, disrupting its mobile cashing app and the processing of online prize claims over $599. Despite these disruptions, ticket sales were not halted.

Following the breach, the Ohio Lottery has been proactive in addressing the fallout. It has issued apologies to affected customers and reaffirmed its commitment to safeguarding personal information. To protect the victims, the lottery is offering 12 months of free credit monitoring and identity theft protection services.