The Ohio Lottery was pressured to close down some key techniques after a cyberattack affected an undisclosed variety of inside purposes on Christmas Eve.
Whereas the incident is now beneath investigation, and the lottery is working to revive all impacted companies, its gaming system continues to be totally operational.
“Cell cashing and prize cashing above $599 at Tremendous Retailers are presently not out there,” the lottery stated in a press launch revealed Wednesday.
“Moreover, successful numbers for KENO, Fortunate One, and EZPLAY Progressive Jackpots are usually not out there on our web site or cell app however might be checked at any Ohio Lottery Retailer.”
Clients may also examine the Ohio Lottery web site and cell app for successful numbers whereas the incident is being investigated and techniques are being introduced again on-line, in line with a separate advisory.
They will additionally money prizes as much as $599 at any Ohio Lottery Retailer location, however these over $600 have to be mailed to the Ohio Lottery Central Workplace or claimed utilizing the digital declare kind.
The Ohio Lottery cell cashing app and its Tremendous Retailer places are usually not cashing any prizes above $599.
“On December 24, 2023, the Ohio Lottery skilled a cybersecurity incident impacting a few of its inside purposes and instantly started work to mitigate the difficulty,” it added.
“The state inside investigation is ongoing. We apologize for the inconvenience and are working as rapidly as doable to revive all companies. “
Assault claimed by new ransomware gang
Whereas the state lottery has not linked the incident to any identified menace actors or hacking teams, the assault has already been claimed by the newly surfaced DragonForce ransomware gang.
The attackers declare to have encrypted units and stolen information throughout the assault, together with Social Safety Numbers and dates of beginning.
A brand new entry added to the DragonForce information leak website means that the allegedly stolen information include info belonging to Ohio Lottery prospects and staff.
“Greater than 3,000,000+ entries, first title, final title, mail, addresses, successful quantities! SSN + DOB information of staff and gamers. [..] The entire weight of the leak when unpacked is about 600+ gigabytes,” the gang says.
Not a lot is understood concerning the DragonForce ransomware gang, and whereas they’re a brand new operation, their ways, negotiation model, and information leak website point out an skilled extortion group.
With regulation enforcement disrupting ransomware operations, it might not be stunning if this was a rebrand of a earlier gang.
