Hacker attack on Merkur Bets

GambleJoe Cookies
Providers:	GJ International Limited
	Cookie name:	PHPSESSID
	Purpose:	This cookie is created by an application based on PHP. The purpose of this cookie is to recognise the user.
	Cookie lifetime:	24 months
	Cookie name:	sid
	Purpose:	This cookie is used to assign personal configuration data.
	Cookie lifetime:	12 months
	Cookie name:	gjcook[ver]
	Purpose:	Version of the saved privacy setting
	Cookie lifetime:	12 months
	Cookie name:	gjcook[stat]
	Purpose:	Configuration of statistic cookies
	Cookie lifetime:	12 month
	Cookie name:	identifier
	Purpose:	This cookie is used to automatically log in when using the "Stay logged in" feature.
	Cookie lifetime:	12 months
	Cookie name:	securitytoken
	Purpose:	This cookie is used to automatically login when using the "stay signed in" feature.
	Cookie lifetime:	12 months

Google Analytics
Providers:	Google Ireland Limited
Data protection decl.:	https://policies.google.com/privacy
	Cookie name:	_ga
	Purpose:	Collection of statistics on the website usage. (Measurement of the range)
	Cookie lifetime:	24 months
	Cookie name:	_gid
	Purpose:	This cookie is used to collect user statistics for the website.
	Cookie lifetime:	24 hours
	Cookie name:	_gat
	Purpose:	Used to throttle the request rate.
	Cookie lifetime:	0

Visitor

Hommie1304

Forum posts: 3 Member since: 02.12.2024

16th Mar. 2025, at 02:33 pm CET#91

1 Like

Liked this post: ronjaa_ronnyy

GUTS,
Due to the incident with you, and the data stolen by the hackers, I am requesting my data information from you in accordance with the right to information under data protection law (pursuant to Art. 15 para. 1, para. 3, Art. 12 para. 3 sentence 1 GDPR).

For this purpose, I present you with a violation against me in accordance with Art. 82 GDPR.
It states that any natural person who has suffered material or non-material damage as a result of a breach of the GDPR has a claim for damages against the data controller.

This concerns my data, where they have not complied with their obligation to take appropriate technical and organizational measures in accordance with Art. 32 GDPR, so we should settle out of court and therefore claim € 1500 non-material damages.

I hereby give you time to respond in writing by 31.03.2025.
If there is no response by this date and therefore no out-of-court proceedings succeed, I will be forced to take further steps.

Yours sincerely

This post has been translated automatically

Visitor

Benno444

Forum posts: 13 Member since: 14.03.2025

Hacker attack on Merkur Bets

16th Mar. 2025, at 02:46 pm CET#92

0 Likes

Nobody has liked this post so far

Hommie1304 wrote on 16.03.2025 at 14:33: Hello,
Due to the incident with you, and the data stolen by the hackers, I request my data information from you in accordance with the right to information under data protection law (pursuant to Art. 15 para. 1, para. 3, Art. 12 para. 3 sentence 1 GDPR).

For this purpose, I present you with a violation against me in accordance with Art. 82 GDPR.
It states that any natural person who has suffered material or non-material damage as a result of a breach of the GDPR has a claim for damages against the data controller.

This concerns my data, where they have not complied with their obligation to take appropriate technical and organizational measures in accordance with Art. 32 GDPR, so we should settle out of court and therefore claim € 1500 non-material damages.

I hereby give you time to respond in writing by 31.03.2025.
If there is no response by this date and therefore no out-of-court proceedings succeed, I will be forced to take further steps.

Yours sincerely

Sounds interesting. Keep us up to date, will you? By the way, how can you not carry out a legally required pentest? I mean, a security gap somewhere is bad. It's not allowed, but it can happen. But not fulfilling requirements, that doesn't happen accidentally. It's funny, when everything is supposed to be so highly reputable and strictly monitored. So much for that...

It's now also being reported on heise and Tarnkappe.ino. But nothing new yet.

This post has been translated automatically

Visitor

Supergreg

Forum posts: 10 Member since: 15.03.2025

Hacker attack on Merkur Bets

16th Mar. 2025, at 03:26 pm CET#93

0 Likes

Nobody has liked this post so far

Benno444 wrote on 16.03.2025 at 14:46:

Sounds interesting. Keep us up to date yes? By the way, how can you not carry out a legally required pentest? I mean, a security gap somewhere is bad. It's not allowed, but it can happen. But not fulfilling requirements, that doesn't happen accidentally. It's funny, when everything is supposed to be so highly reputable and strictly monitored. So much for that...

It's now also being reported on heise and Tarnkappe.ino. But nothing new yet.

It is therefore all the more important to exert pressure now. SlotMagie (Merkur AG) knows exactly that the situation is serious.

The fact that they have apparently not carried out regular penetration tests is a significant omission. IT systems are constantly exposed to new security risks - which is precisely why such tests are essential.

The gambling industry has strict security requirements and if these were not met, there could be additional legal consequences.

I am an IT specialist myself and know my way around this area.

The next logical step is to claim compensation. It is unlikely that they will pay immediately, but that is how the legal process works.

As soon as legal fees come into play, the pressure increases considerably, as the loser of a lawsuit has to pay them.

It is quite possible that SlotMagie (Merkur AG) is currently trying to get an overview of how many of those affected are claiming compensation.

It is therefore all the more important that as many people as possible actively participate now.

Greetings Greg

This post has been translated automatically

Rookie

Apromo

Forum posts: 25 Member since: 16.11.2019

Hacker attack on Merkur Bets

16th Mar. 2025, at 04:15 pm CET#94

0 Likes

Nobody has liked this post so far

"The Merkur Group uses portal software from the Maltese company "The Mill Adventures" in its casinos.

Is it possible to see somewhere which casino providers use this software?

This post has been translated automatically

Elite

frapi07

Forum posts: 3.590 Member since: 27.02.2021

Hacker attack on Merkur Bets

16th Mar. 2025, at 05:40 pm CET#95

0 Likes

Nobody has liked this post so far

Regarding Protectra, I would link to this video:

I read in the comments that some people complained a lot about the amount. They get around €25 for it. The company in the video is not Protectra, but at the time they also promised "up to €1000". So I wouldn't expect the world. The ID photos were public here, but I don't know how much more euros you can expect here and whether it makes sense to try it alone or with such companies.

This post has been translated automatically

Elite

slotliebe89

Forum posts: 2.453 Member since: 13.01.2019

Hacker attack on Merkur Bets

16th Mar. 2025, at 05:53 pm CET#96

3 Likes

Liked this post: Danny0815, frapi07, Tobsen

frapi07 wrote on March 16th, 2025 at 5:40 pm: Regarding Protectra, I would link to this video:

I read in the comments that some people complained extremely about the amount. They get about 25€ for it. The company in the video is not Protectra, but at the time they also promised "up to €1000". So I wouldn't expect the world. ID photos were public here, but I don't know how much more euros you can expect here and whether it makes sense to try it alone or with such companies.

ID documents and telephone numbers linked to bank details are pretty much the most sensitive data, so you can't compare this with the Facebook data leak.

This post has been translated automatically

Elite

Donnie

Forum posts: 3.525 Member since: 07.10.2021

Hacker attack on Merkur Bets

16th Mar. 2025, at 06:15 pm CET#97

1 Like

Liked this post: bigbig

These casinos should have invested in a proper security system, but they have enough money for sponsoring, advertising, etc

This post has been translated automatically

Elite

frapi07

Forum posts: 3.590 Member since: 27.02.2021

Hacker attack on Merkur Bets

16th Mar. 2025, at 06:24 pm CET#98

0 Likes

Nobody has liked this post so far

slotliebe89 wrote on 16.03.2025 at 17:53:
ID documents, phone number linked to bank details are pretty much the most sensitive data, so you can't compare that to the Facebook data leak.

I agree with you there. You can do a lot with your ID alone. You know the old eBay scams where you were sent some kind of ID card as "security". This was often stolen and misused for scams. What I was getting at is that these companies also want to get something and it takes years to get compensation. The Facebook leak was in 2021, well, we're talking about 553 million users here, but I wouldn't expect anything until 2027. I also think it's a waste of time trying to do it alone. They will completely ignore such requests. So you do need an association to make it less of a headache, but I don't know how good/bad Protectra's offering is. At the moment, they are the only ones offering it. I don't know whether others will be added.

This post has been translated automatically

Visitor

Supergreg

Forum posts: 10 Member since: 15.03.2025

Hacker attack on Merkur Bets

16th Mar. 2025, at 07:13 pm CET#99

0 Likes

Nobody has liked this post so far

frapi07 wrote on March 16th, 2025 at 6:24 pm:
I agree with you. You can do a lot with the ID alone. You know the old eBay scams where you were sent some kind of ID as "security". This was often stolen and misused for scams. What I was getting at is that these companies also want to get something and it takes years to get compensation. The Facebook leak was in 2021, well, we're talking about 553 million users here, but I wouldn't expect anything until 2027. I also think it's a waste of time trying to do it alone. They will completely ignore such requests. So you do need an association to make it less of a headache, but I don't know how good/bad Protectra's offering is. At the moment, they are the only ones offering it. I don't know whether others will be added.

I agree with you that it can take time for compensation to be paid out - especially when companies play for time. However, I think it's an exaggeration to say that it's a waste of time on its own. There are numerous examples of individuals successfully claiming GDPR damages.

Protectra may be one option, but it is certainly not the only one. There are several law firms that take on such cases, including some that are purely success-based. Merkur AG, based in Germany, is ultimately responsible, and SlotMagie is managed by The Mill Adventures, a subsidiary of Merkur AG. This means that those responsible cannot simply get out of the affair - especially because they have a German license.

Everyone should weigh up carefully whether to take legal action themselves or go through a provider. Personally, I look for a law firm that works purely on a contingency basis so that I don't incur any costs initially - but I clarify this in advance.

In Germany, filing a lawsuit is generally free of charge, as there are no court costs for the plaintiff if they are not financially able to pay them. If you cannot afford a lawyer, you can apply for legal aid (PKH).

So please don't be afraid of costs - there are ways to get legal support without incurring financial risks!

This post has been translated automatically

Visitor

Benno444

Forum posts: 13 Member since: 14.03.2025

Hacker attack on Merkur Bets

16th Mar. 2025, at 07:40 pm CET#100

1 Like

Liked this post: Danny0815

Fortunately, I didn't send any ID or photos. As far as I can remember, I had the account at SlotMagie blocked again immediately after I was asked to send any photos for Verification purposes. At Crazy Buzzer, verification was done via the first depositor. I didn't go to Merkurbets. Surely that must have been all the casinos concerned?

The other data is bad enough, but the photos are really bad. It's the master key for everything, so to speak. If you want verification, you should do it via a Schufa query, payment service Provider, letter post or Postident at the post office. If that doesn't work, then let them keep their shit. No matter who and what it's about. No one will ever get a photo of their ID/selfie in this life. I've only really realized that now. Sorry, I'm just talking to myself

If you want to sue, whether alone or collectively, I wish you good luck. But I would still remember that this is not just a demand. A process is set in motion that incurs costs and someone will have to pay these costs at some point. Without legal protection, it's quite a thing. And with something like Protectra, there is supposedly no cost risk. That may be true, but you also enter into a contract with them and will probably have to adhere to certain terms and conditions. But what if you can't or don't want to? I have no idea. I have no experience with that. I would just think about it beforehand...

This post has been translated automatically

Visitor

Supergreg

Forum posts: 10 Member since: 15.03.2025

Hacker attack on Merkur Bets

16th Mar. 2025, at 08:14 pm CET#101

1 Like

Liked this post: Danny0815

So I plan to find a law firm to take on this case next week.
I will also raise the issue of a class action there.

So if you are also affected and interested, I would be delighted if you could send me a message.

I will keep you up to date as soon as I have more information.

Greetings Greg

This post has been translated automatically

Visitor

Benno444

Forum posts: 13 Member since: 14.03.2025

Hacker attack on Merkur Bets

16th Mar. 2025, at 08:14 pm CET#102

3 Likes

Liked this post: Danny0815, Max_Bet, Tobsen

I've just thought of something else. If you can't avoid photos somewhere and at some point, there are free programs where you can add a kind of watermark. In other words, a shimmering text in the middle of the photo.

If the ID card selfie then says "Registration for XY on 16.03.2025", potential bad guys won't be able to do much with it.

Not just for ID photos or casinos, but in general. I'll always do that from now on. I'm already talking to myself again...;)

This post has been translated automatically

Top Member

Malganes

verified

Forum posts: 808 Member since: 17.11.2018

Hacker attack on Merkur Bets

16th Mar. 2025, at 09:38 pm CET#103

1 Like

Liked this post: Danny0815

Benno444 wrote on 16.03.2025 at 20:14: I just thought of something else. If you can't avoid photos somewhere and at some point, there are free programs where you can add a kind of watermark. So a text that shines through in the middle of the photo.

If the ID card selfie then says "Registration for XY on 16.03.2025", potential bad guys won't be able to do much with it.

Not just for ID photos or casinos, but in general. I'll always do that from now on. I'm already talking to myself again...;)

The only question is whether casinos will accept such photos with a watermark.

This post has been translated automatically

Visitor

GambleMike

Forum posts: 11 Member since: 14.03.2025

Hacker attack on Merkur Bets

16th Mar. 2025, at 09:48 pm CET#104

0 Likes

Nobody has liked this post so far

Benno444 wrote on 15.03.2025 at 20:26:

Well, that's right. The Streisand effect doesn't really fit. I just meant that maybe it's not so smart to enter into a contract with a shyster even though you haven't suffered any damage. Maybe this creates a problem in the first place, even though there really isn't one, if you just leave it at that.

Protectra tries to get something out of it and if it works, then they pocket part of it. If not, they don't. They say I won't incur any costs, but is that really the case? If I assign the case, then I can't do anything myself, can I? What happens if I demand or have already demanded the deletion of data or something else that Protecta doesn't like and I may have ruined their business as a result? Am I then possibly in breach of Protectra's GTCS? Will there still be any costs afterwards? Or any phone calls, appointments and correspondence with anyone? I have no idea. As I said, I don't know the company and have never had anything like this to do with it. Maybe it's a good thing.

Someone here wanted to go through their lawyer and then report back. Maybe wait and see what he says?

You feel that you have not suffered any damage. Case law has nevertheless affirmed claims for damages (see BGH in the Facebook case, as already explained here). That's why you don't have to claim damages, but why are you being unobjective towards those who do or are considering doing so? That's why nobody is a shyster. Merkur Bets screwed up, not the person holding the casino accountable for it.
Incidentally, it would make me suspicious if a company offered services without wanting anything in return. That is window dressing. To stick with the Protectra example you mentioned. It clearly states that they want something if they are successful. Fair enough, then they make an effort. Nowhere does it say that you can no longer demand deletion. The other concerns that have been expressed are also completely unfounded. This is a GmbH based in Germany that is registered as a service Provider at Bundesjustizamt. They would have a lot of fun if they were to claim any costs, even though they expressly state that the fee agreed in the contract is only payable in the event of success.
Anyone is free to hire a lawyer, who will take money in any case. Also fair enough: the lawyer wants to make a living from it and, in addition, he cannot work for free or with the model without further ado (just search for "pro bono legal basis")

This post has been translated automatically

Visitor

stefan93

Forum posts: 1 Member since: 16.03.2025

Hacker attack on Merkur Bets

16th Mar. 2025, at 10:06 pm CET#105

0 Likes

Nobody has liked this post so far

Supergreg wrote on 16.03.2025 at 20:14: So I plan to find a law firm to take on this case next week.
I will also bring up the topic of a class action lawsuit there.

So if you are also affected and interested, I would be happy if you send me a PN.

I will keep you up to date as soon as I have more information.

Greetings Greg

I might also be interested as soon as you can share more information regarding the class action. Thank you and best regards, Stefan

This post has been translated automatically

Online Casinos in general: Hacker attack on Merkur Bets (Page 7)

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Hacker attack on Merkur Bets

Best Online Casinos

Hot Topics16th Apr. 2025 at 02:01 pm CEST

Data analysts see anomalies in German online ...

Will vending machines be banned from public festivals due to ...

Crime statistics: Illegal gambling at record ...

GambleJoe Team

Community Forum-Moderators

Forgotten your password?