The British Columbia Lottery Corporation (BCLC) is warning residents with a PlayNow account to update their passwords after criminals recently attempted to hack the website using stolen passwords. According to the BCLC, a “suspiciously high volume of traffic” was detected on July 24th on the gambling and lottery site.
After reviewing the activity, programmers determined that the traffic was due to “credential stuffing,” a practice in which criminals use emails and passwords leaked or stolen from other websites to attempt access. The method is based on the assumption that people often use the same email and passwords across different websites.
PlayNow is operated by the BCLC in B.C., Saskatchewan, and Manitoba, in partnership with Saskatchewan and Manitoba gambling authorities.
“This is a deeply concerning incident and a cautionary tale for everyone with several online accounts,” said BCLC president Patrick Davis in a statement. “Our investigation remains ongoing, and we have found no evidence that our systems have been compromised, or that player login information was stolen from our systems.”
Once the hacking attempt was detected, PlayNow said it locked affected accounts and notified players. Measures were also taken to block suspicious traffic, according to local media reports.
An investigation is continuing and both provincial and federal privacy commissioners have been notified, along with the appropriate gambling regulation authorities and Royal Canadian Mounted Police.
PlayNow account holders are being asked to change their passwords and ensure their online accounts are not reusing credentials, and that their passwords are not easy to guess.
“Integrity and security are at the core of our business and our games,” added Davis. “We are committed to continuing our ongoing evaluation and enhancement of PlayNow security controls to maintain the safety of our players’ information going forward.”
Original article: https://www.yogonet.com/international/noticias/2024/08/02/74032-bclc-warns-playnow-users-to-change-passwords-as-hackers-attack-gambling-website
