Online Casinos in general: Hacker attack on Merkur Bets (Page 2)

This post has been translated automatically

Stromberg wrote on 14.03.2025 at 09:55:

I always thought the images were only used by the Verification service provider. Of course, if it's their own software, then it's not. Still, it's unacceptable that they are not deleted afterwards.

This post has been translated automatically

This post has been translated automatically

TonioKroeger wrote on 14.03.2025 at 09:29: I can no longer Deposit at StarGames. Could that be related to this?

This post has been translated automatically

This post has been translated automatically

This post has been translated automatically

This post has been translated automatically

This post has been translated automatically

Zockerbernd wrote on 14.03.2025 at 11:39 am: I also understand the people who now say, yes well, I always take the Risk wherever I register anyway, but you still have to distinguish between a webshop database and a database like the one that was apparently stolen here with ALL the information. In the worst case, as it seems to be with the ID, photos and possible Verification selfies etc. you can't describe it any other way than Black Friday today or SUPERGAU in the German gambling market.

PS: I don't want to create a mood, even if it comes across that way, but rather to show what a no-go fatal error the whole thing is.

This post has been translated automatically

Win wrote on March 14, 2025 at 06:51: Hello,

i received this email last night:

Hello XXX, we are contacting you today to inform you about a recent data breach on our platform merkurbets.de : Our IT systems have been attacked by hackers. They have gained unauthorized access to customer data. As the hackers acted in a highly professional manner, but not criminally, they informed the responsible supervisory authority, but did not use the data to the detriment of our customers. We attach great importance to transparency and would therefore like to explain the background and possible risks to you and explain what steps we have already taken. Despite extensive security measures, the IT system of one of our service providers was the target of a cyber attack. Unauthorized third parties, who apparently wanted to draw attention to potential security gaps, discovered points of attack in our systems and gained access to personal customer data. However, as far as we are currently aware, these activists have no intention of passing on or misusing the information obtained. Based on current information, the incident concerns the following customer data: Name, address, transactions and account data (if these were available), ID data, photos from video identification and Risk ratings regarding the risk of gambling addiction. The important thing is: Your passwords have not been stolen and are still secure, so there is no need to change your passwords. However, if you would like a greater sense of security, we recommend that you update your passwords at regular intervals. As far as is currently known, the attack was primarily directed against our company and not specifically against individual customers. There are no indications that the data viewed was or is being misused for fraudulent purposes. In addition, the report was made to us via the Joint Gaming Authority of the federal states (GGL) and not via the hackers themselves. Nevertheless, we are monitoring the situation very closely and are in close contact with our IT security experts and the relevant authorities. Although we consider the risk to be low, we would like to draw your attention to the following potential risks: Identity theft: Your data could be used for fraudulent purposes, for example to conclude contracts. Phishing attacks: Fraudsters could use personal data to contact you specifically by e-mail, telephone or text message in order to obtain further information from you or to persuade you to click on malicious links. As a precautionary measure, we recommend that you remain vigilant, do not send sensitive data unencrypted and check your bank and credit card statements for unusual transactions. Upon discovery of the incident, we immediately took all necessary measures to restore the security of the systems. For example, we arranged for all identified security gaps to be closed immediately. The responsible data protection authorities have been informed in accordance with the regulations. We are still in contact with the Joint Gaming Authority of the federal states and are working intensively on the protective mechanisms. We also continuously review our security measures and update internal processes and employee training in order to prevent similar incidents in the future. We will also carry out more audits with other security experts in order to identify and eliminate any weaknesses at an early stage and prevent a recurrence of such an incident. If you have any further questions about this incident, you will find a wealth of information in our FAQs. You can access these under the following link: www.merkurbets.de/de/page/wichtige_informationen

Thank you for your trust and support. With kind regards, Your MERKUR BETS Team

Now I have verified myself via video. This means that a hacker has all my data and pictures (why are these pictures stored at all) and could do God knows what with them. Where does Merkur Bets get the certainty that this data will not be sold on the darknet or elsewhere and subsequently misused? Only from the fact that the oh-so-great gambling authority has been informed.

Is anyone here still with Merkur (verified) in the forum? What do you think?

For someone like me who places a lot of value on privacy on the internet (no social media, no picture or anything like that), this is like a nightmare right now.

This post has been translated automatically

This post has been translated automatically

Frankey wrote on March 14, 2025 at 12:16 pm:

Your data is okay. It was 'white hat hackers' who did it either because there was one, or like here, for fun. They stole nothing but showed how to do it with Merkur

This post has been translated automatically

Falko wrote on 14.03.2025 at 12:58: Since the hackers acted in a highly professional but not criminal manner, they informed the responsible supervisory authority, but did not use the data to the detriment of our customers. - I find this sentence confusing, how can this be described as non-criminal, what else is it if not criminal?

This post has been translated automatically

Falko wrote on 14.03.2025 at 12:58: Since the hackers acted in a highly professional but not criminal manner, they informed the responsible supervisory authority, but did not use the data to the detriment of our customers. - I find this sentence confusing, how can this be described as non-criminal, what else is it if not criminal?

This post has been translated automatically

This post has been translated automatically