Cloudbet hacked?

[Z390]

It's possible to get notification that your password is not secured anymore because it's been leaked, do you mind knowing how? That's your fault because you have used that same password on another platform, it doesn't have to be Cloudbet, if you have used the same password on another platform before then that's the problem.

I have seen a few of my passwords leaked online, and my Google email account password manager always warned me about the leak, in the past, I always preferred to use the same password on different websites.

If the problem is from Cloudbet, many people will get the same warning too, I still strongly believe that using of passwords on more than one platform is what puts them at risk, you are to use different types of passwords on every single platform you decide to create an account on.

[1715339555]

1715339555

[1715339555]

1715339555

[1715339555]

1715339555

[noormcs5]

It seems that there's now a clarity on what you really receive. But I just want to reiterate some things about these emails that we receive.
If there's no official announcement from then, that's like someone is spoofing as Cloudbet and has taken the credentials or email of their customers and trying to phish you.
This happens not just in casinos but almost in every service where your email has potentially been leaked or hacked and whatever you're receiving is just an email and phishing attempt from theirs. If there's a link attached at the end of the email, don't click it and check first the link if it's safe or a link directing you to visit the phishing form.

There are two takings from this incident.

First, we should not depend upon emails etc to know if a certain site is hacked or compromised. Usually, the news should come from the office handle like Twitter etc. ? If the site is hacked and back to normal, the players of the site should be notified so that they know when is to safe playing there.

Secondly, we should avoid keeping extra funds on the centralized casino sites as we never know when a mishap or a hack may happen and we may lose our funds.

[Eternad]

About a week ago, I received an alert on my iPhone indicating a potential data leak involving Cloudbet casino account credentials. The concerning part is that the email account linked to my Cloudbet registration was exclusively created for this purpose, so there's no chance of it being compromised elsewhere. While it's possible this might be a false positive, I'm taking this matter seriously.

Not on Cloudbet but I’m experiencing same security alert on other casino which I will not name despite I’m not using anymore the casino for a long time. Do you play regularly because I assume that some casino is doing it intentionally to alert inactive players and probably to play back in the casino after visiting the casino once again.

You can check the IP loging of your account by requesting it to the support to double check whether there’s really someone try to access your account. Use 2FA security if just to make sure the safety of your account.

[Marvelman]

It has everything to do with Cloudbet

-The email was only used for the purpose of using Cloudbet
-The account has been created a few months ago

You're still not making it clear. You mentioned receiving the notification from your iPhone password manager. So, why does it matter which email address you used on Cloudbet if the password manager is warning you about a potential password leak?

As I see it, this could simply mean that you're using a relatively weak password that someone else may have also used elsewhere, and that password may have been publicly leaked at some point. You can check if your email address has been involved in any known data breaches in the past by using haveibeenpwned.com.

[Kakmakr]

The Curacao gambling license has nothing to do with the security that are implemented on the site. You know Stake.com has recently lost $40 000 000 due to them being hacked by a North Korean hacking group, but none of the gamblers wallets were compromised.

These hacks are government sanctioned hacks and most of these smaller sites are vulnerable against it, because all of them use hot wallets. The Curacao gambling license will not cover people if the casino gets hacked. 

[Marvelman]

Unique Passwords: I make it a practice to use unique passwords for each of my accounts, including my Cloudbet account. The password in question, which triggered the alert, was exclusively created for my Cloudbet registration.

It’s important to note that any detected matching passwords aren’t necessarily connected to one of your accounts. Apple is only looking for password matches, not password and email, password and phone number, or similar combinations used for login credentials. As a result, if another person coincidentally used the same password as you and it was part of the data leak, you’ll still get the notice.

https://firewalltimes.com/data-leak-notice-on-iphone/

Email Account Usage: It's essential to note that the email account linked to my Cloudbet registration has never been used for any other purpose or platform. Its sole purpose has been to facilitate my engagement with Cloudbet.

There's no need to emphasize this because your email is completely unrelated to the situation. You said yourself, the alert was triggered when you used the saved password on your device.

Why don't you just change your password and use something unique this time that wasn't part of any data leaks?

[Coin_trader]

Alert Medium: I received the alert through an iOS push notification, not via email. This notification was generated by a feature that detects if credentials stored in the password manager are part of a data leak.You can also check the data leaks on Settings->Passwords->Security Recommendations

Agreed on the user above comment. Your email is relevant here since the alert you are referring is from your iPhone and not through email notification which you should make clear on your OP.

By any chance, Do you login your Apple ID on different device which you are not using anymore or use different IP because iCloud share all info including passwords on all the device you connect your apple ID if you use the strong password suggestion of the apple. You might recently remove your device to trusted device from different phone which you first create the password that’s why using save password on your current phone triggered the alert.

[Agbe]

It seems that there's now a clarity on what you really receive. But I just want to reiterate some things about these emails that we receive.
If there's no official announcement from then, that's like someone is spoofing as Cloudbet and has taken the credentials or email of their customers and trying to phish you.
This happens not just in casinos but almost in every service where your email has potentially been leaked or hacked and whatever you're receiving is just an email and phishing attempt from theirs. If there's a link attached at the end of the email, don't click it and check first the link if it's safe or a link directing you to visit the phishing form.

This is what I was also thinking of, since the email address of the op used in registering the Cloudbet account was not in the received email then there is no need to panic. I am suspecting that it is a random email sent by fraudsters and not from Cloudbet casino platform. I have received such email in plenty time. And anytime I see the email in my inbox I ignored it and delete it instant. And I discovered that I was the one who mistakenly registered in the platform, I would make sure that I unsubscribed from the service. So I will say since his original email was not included in the message then he should calm down.

[Slow death]

Well, if there's one thing that doesn't take long to be everywhere, it's bad news, especially when it's news related to cases of a website being targeted by hackers. and if until now there is no news about cloudbet being the target of a hacker, then it is because they were not hacked, the problem may only be on your side, you better be careful. Now I honestly wouldn't advise you to put a lot of money into cloudbet and you shouldn't trust them too much, even though they haven't had many complaints at the casino in recent months.

https://casino.guru/Cloudbet-Casino-review#tab=js-tab-reviews

In the past they have had many complaints that it took a long time for their support to respond and resolve customer problems, I can see it here: 

https://www.trustpilot.com/review/www.cloudbet.com

that currently their support has been active in responding to people's complaints, although I haven't seen the people who complain posting that their problems have been resolved, so be careful with cloudbet and also as you can see on these two review sites there is no There was no one commenting that cloudbet was targeted by hackers, so that means they were not targeted by hackers and the problem is on your side.

[so98nn]

I wish to express my gratitude for the prompt responses and valuable insights shared. I would like to clarify the nature of the alert I received on my iPhone. This alert was generated by a built-in feature that detects if credentials stored in the password manager are part of a data leak. The specific message conveyed was:
"This password appeared in a data leak, which puts this account at high risk of compromise. You should change your password immediately."

Thank you for the clarification, now it makes more sense!
The worning you received has nothing to do with Cloudbet. It doesn't mean Cloudbet has been hacked or there is a breach or anything like that.
It only means that your password is weak or it appears in one of the leaked databases.
You can enter your password here to see if it was exposed in any of the known breaches:
https://haveibeenpwned.com/Passwords

Ok if that is the case then we can safely say Cloudbet is in good hands. Moreover, there would have been an official announcement quicker than we needed to open a discussion about it. Since there is no such comment from the Cloudbet officials it is just a matter of someone trying to phish the entire thing or may be just part of negative marketing. However, in my opinion, if we have the slightest doubt about any casino or any sort of website out there we should either change he password, take out the funds from the website, or make he account safer with 2FA if that option is available. If we are not too attached to the website then we can just find an alternative way to invest and go there. It's always better to prevent stuff before it gets on our heads.

I have no doubt that every casino site tries its best to keep its data safe so that users can trust it and keep investing in it. However it is best practice to perform all the safety actions before losing any funds to the fraudsters.

[Hispo]

The Curacao gambling license has nothing to do with the security that are implemented on the site. You know Stake.com has recently lost $40 000 000 due to them being hacked by a North Korean hacking group, but none of the gamblers wallets were compromised.

These hacks are government sanctioned hacks and most of these smaller sites are vulnerable against it, because all of them use hot wallets. The Curacao gambling license will not cover people if the casino gets hacked. 

Though, I would be constructive if some casino license issuers actually take some time and resources to check on the security of their casinos they are supposed to license.
I am not sure how realistic such possibility could be, the issuer of those licenses may need to charge extra for the work of checking security features.

But if gives some extra sense of reliability to both owners of casinos and gamblers, I believe it would be worth it.
Curacao could even partner with security companies specialized in hacking and code audits.

[goaldigger]

The Curacao gambling license has nothing to do with the security that are implemented on the site. You know Stake.com has recently lost $40 000 000 due to them being hacked by a North Korean hacking group, but none of the gamblers wallets were compromised.

These hacks are government sanctioned hacks and most of these smaller sites are vulnerable against it, because all of them use hot wallets. The Curacao gambling license will not cover people if the casino gets hacked. 

This is a information leaked and the site didn’t lose the money which still makes them a secured site or Cloudbet didn’t disclose this, fortunately I have no account with Cloudbet. Having a casino license doesn’t guarantee safety and being responsible will always depend on the integrity of the site, let’s see how Cloudbet will handle this situation as they are one of the pioneer when it comes to crypto casinos.

[decodx]

This is a information leaked and the site didn’t lose the money which still makes them a secured site or Cloudbet didn’t disclose this, fortunately I have no account with Cloudbet. Having a casino license doesn’t guarantee safety and being responsible will always depend on the integrity of the site, let’s see how Cloudbet will handle this situation as they are one of the pioneer when it comes to crypto casinos.

What situation? There's no situation here! Please take the time to read some of the other replies in the thread before responding, not just the original post.

There was no hack on Cloudbet or any data leak from the site that we know of. Why make assumptions? This is just some random guy claiming his password was leaked, even though, from what he described, it may not be true at all. If there really was a hack or data leak, don't you think we would have heard about it by now?

[Wiwo]

Upon reading the progression of this thread, it appears that you may have misunderstood the message you received. It has nothing to do with Cloudbet being hacked; it's just that they are reiterating that your password may have been compromised. But even still, if I haven't confirmed the source of the message, I wouldn't click any link and would move forward with just checking the website myself.

With the amount of hacks going around, it's great that these casinos have the time to do a SMS or email blast. They're just looking out for your safety, after all.

The rate of hacks in recent time is at alarming rate and at that most casinos are taking precautions to protect the gamblers,  because if the almighty stake can experience a hack some time about a week plus everyone need to take actions to protect yourself and if you are gambling on a casino that allows you to have extra securities then I advise you to activate them.

Why casinos send this kind of warning message is because they trying to protect the customer account from getting emptied if there are any possible hack situations in the casino.

[khaled0111]

Alert Medium: I received the alert through an iOS push notification, not via email. This notification was generated by a feature that detects if credentials stored in the password manager are part of a data leak.You can also check the data leaks on Settings->Passwords->Security Recommendations

I'll try to explain how thus iOS feature works so you can understand what happened and why you are receiving that alert notification.
You password manager app will regularly check if your password appears in any of the hacked/ publicly leaked databases. If it exists, the app will display the alert. This doesn't necessarily mean that the website on which you have used that password is the one that got hacked. In most cases, it's just someone else who uses the same password on a totally different platform.

You may ask why you are receiving the alert if this is the case! Well, because hackers use those leaked passwords in their wordlists when performing brute force attacks. So, if someone targets your account and uses such a wordlist, he will eventually find the right password.

What you should do now is just to change your current password with a stronger one for more security.

[PX-Z]

If you include a screenshot of the email you received covering confidential info then it will be a good shot. Because there are times that a phishing email looks like this — a "hacked account" and sometimes a misunderstanding ^{(which is probably your case)}. Why? Because there's no news about it