Shuffle suffers data breach. Do not panic but read what I posted.

[_act_]

You can get the information from X
https://x.com/noahdummett/status/1976558783229985080

That is co-founder and CEO of Shuffle, Noah Dummett posting about the incident on X.

The reason for this thread is to let people know that they should avoid phishing messages. According to what Noah Dummett posted, third party providers, Fast Track, suffered a data breach that exposed their users’ data. Fast Track is a CRM software that they (and many others in the gaming industry) use for programmatic email sending and various communications with users.

So the emails of their users is what that is only leaked to hackers and nothing more. If you see any message from Shuffle, make sure it is from the gambling site and not from malicious people. You can ask the gambling site customer care about the message if you are not sure. Shuffle will not ask you for your login details and it will not ask you to click on malicious link.

Make sure you access the site through their correct URL and not from email.

[dimonstration]

I share this information on the Shuffle ANN thread recently but creating a separate thread for warning is badly needed.

I thought all data was safe when I initially read the content of the email warning but since email was exposed I believe this is very dangerous to all Shuffle players that typically claim bonus from email.

A hacker can timing their scam bonus right after Shuffle release one. Keep safe everyone.

[Wind_FURY]

You can get the information from X
https://x.com/noahdummett/status/1976558783229985080

That is co-founder and CEO of Shuffle, Noah Dummett posting about the incident on X.

The reason for this thread is to let people know that they should avoid phishing messages. According to what Noah Dummett posted, third party providers, Fast Track, suffered a data breach that exposed their users’ data. Fast Track is a CRM software that they (and many others in the gaming industry) use for programmatic email sending and various communications with users.

So the emails of their users is what that is only leaked to hackers and nothing more. If you see any message from Shuffle, make sure it is from the gambling site and not from malicious people. You can ask the gambling site customer care about the message if you are not sure. Shuffle will not ask you for your login details and it will not ask you to click on malicious link.

Make sure you access the site through their correct URL and not from email.

Thanks for the P.S.A.

Because it was a third-party that handles Shuffle's automated emails that was breached, are there other casinos in crypto, or casinos in general, that use FastTrack for their automated emails?

All users in BitcoinTalk should be careful with ALL emails from any casino, no?

[Sticky Bomb]

I thought all data was safe when I initially read the content of the email warning but since email was exposed I believe this is very dangerous to all Shuffle players that typically claim bonus from email.

I think they should send all their users a standard email informing them of the data leak and giving them proper directive on how not to fall for scams, also users should be carefully informed how to recognize explicitly the email address of Shuffle so they're able to ignore scam emails that would come from identical email addresses with very little/negligible differences.

A hacker can timing their scam bonus right after Shuffle release one. Keep safe everyone.

Yeah and that's why the company should educate users more on how to identify scam emails in order to keep safe.

[Pi-network314159]

So the emails of their users is what that is only leaked to hackers and nothing more. If you see any message from Shuffle, make sure it is from the gambling site and not from malicious people. You can ask the gambling site customer care about the message if you are not sure. Shuffle will not ask you for your login details and it will not ask you to click on malicious link.

Make sure you access the site through their correct URL and not from email.

This is a nice information to all,  not only to the people using shuffle gambling or betting app. But it will serve as a message or reminder to many people here on different gambling site to stay away from malicious message that doesn't come from the original betting site. Gambling site can not ask for anyone for their logging password or a vital information. If anykne sees this then they should stay clear because it's a red flag.

[Slow death]

Well, these are sad things that happen. Unfortunately, I read this news on Cointelegraph:

https://cointelegraph.com/news/major-crypto-betting-platform-shuffle-com-announces-user-data-breach

According to the news, it was the outsourced customer service provider that was targeted by the hacker, not the casino itself. Since casinos never ask for passwords when the support agent is dealing with customers, everything is fine. Now, the problem is that in the emails people send to support when they have a problem, they mention their usernames and the amount they won. If these hackers read this and see that someone won a lot of money, they can focus on pursuing that person by various means they can. Like sending them constant emails to get them to click on a link and then gain access to their account.

[Ivystar5]

I share this information on the Shuffle ANN thread recently but creating a separate thread for warning is badly needed.

I thought all data was safe when I initially read the content of the email warning but since email was exposed I believe this is very dangerous to all Shuffle players that typically claim bonus from email.

Good Op raised the thread, it helps alot especially for those in the shaffle campaign that uses shaffle frequently.

For the safety of data's I don't usually believe that anything is safe as long it is bridged by hackers, they will only try to assure users that their data's are safe and well handled to give them confidence but most times behind the scenes they are struggling to recover the data's they most have lost and that's a very big threat to users and emails sent could even contain crypto tracking bugs, since that one thing hackers knows and uses the most.

[Akbarkoe]

You can get the information from X
https://x.com/noahdummett/status/1976558783229985080

That is co-founder and CEO of Shuffle, Noah Dummett posting about the incident on X.

The reason for this thread is to let people know that they should avoid phishing messages. According to what Noah Dummett posted, third party providers, Fast Track, suffered a data breach that exposed their users’ data. Fast Track is a CRM software that they (and many others in the gaming industry) use for programmatic email sending and various communications with users.

So the emails of their users is what that is only leaked to hackers and nothing more. If you see any message from Shuffle, make sure it is from the gambling site and not from malicious people. You can ask the gambling site customer care about the message if you are not sure. Shuffle will not ask you for your login details and it will not ask you to click on malicious link.

Make sure you access the site through their correct URL and not from email.

Thank you for the information, this is very useful for me personally, especially for people in the forum, and this method does not mean it is only intended for users on shuffle, of course other casinos have the same possibility, so this really should be a warning for us to be more careful about the emails we get and look carefully at the sender's email and the link they share, because I myself receive a lot of emails from many casinos, maybe it's one of the casino's own marketing, such as bonuses, monthly bonus withdrawals or other offers.  a lot of people go through email.

[BIT-BENDER]

Great information, this is one of the reason why you should delegate your email address, try to use a different email addresses you use to register thing online from the one for your personal use. Also be careful about things you click on from your email.
It's great shuffle noticed this and is now alerting there users to me that's a fair move to counter the lapses they had by exposing people's email. Moving forward they should probably find better ways to protect such informations.

[coinlary]

Email leaks , that's  bad!
Some gamblers won't  still recognize phishing messages, some do come with a very clean and identical.templates which could  be very trivking and convincing.
Checking  the seder details and making a little research could help in this case, I would avoid clicking  any links as well especially casino/betting site related emails

[Charles-Tim]

Great information, this is one of the reason why you should delegate your email address, try to use a different email addresses you use to register thing online from the one for your personal use. Also be careful about things you click on from your email.

If you have email for gambling sites, that means it is also one of your personal emails, unless you did not included it on your device to be receiving messages from it but which I doubt that. If you are receiving messages from it, it will still be the same as your personal email but just that it is better to know how to know phishing messages and avoid online bad actors.

[yahoo62278]

You can get the information from X
https://x.com/noahdummett/status/1976558783229985080

That is co-founder and CEO of Shuffle, Noah Dummett posting about the incident on X.

The reason for this thread is to let people know that they should avoid phishing messages. According to what Noah Dummett posted, third party providers, Fast Track, suffered a data breach that exposed their users’ data. Fast Track is a CRM software that they (and many others in the gaming industry) use for programmatic email sending and various communications with users.

So the emails of their users is what that is only leaked to hackers and nothing more. If you see any message from Shuffle, make sure it is from the gambling site and not from malicious people. You can ask the gambling site customer care about the message if you are not sure. Shuffle will not ask you for your login details and it will not ask you to click on malicious link.

Make sure you access the site through their correct URL and not from email.

This is info people should heed not only when dealing with shuffle, but for everything. Don't click links folks unless you are 100% sure it's safe. Never know who is doing some silly shit looking for personal info or login details.

[Ruttoshi]

Great information, this is one of the reason why you should delegate your email address, try to use a different email addresses you use to register thing online from the one for your personal use. Also be careful about things you click on from your email.

If you have email for gambling sites, that means it is also one of your personal emails, unless you did not included it on your device to be receiving messages from it but which I doubt that. If you are receiving messages from it, it will still be the same as your personal email but just that it is better to know how to know phishing messages and avoid online bad actors.

I have a separate email specific for only gambling and I use it on a different phone from the one that I use for my crypto activities. I think this has been discussed several times in the forum about not clicking on random link. I believe that bad actors will want to use this opportunity to play smart on Shuffle users. They should all be careful on which link to click that's from Shuffle.

OP, did great to create awareness here by creating a thread for it in order to avoid forum members from being victim because this is the first time I am seeing this.

[Nwada001]

This is not just a breach on Shuffle, but it's a breach that affects all platforms that Fast Track is providing service to. As of yesterday, I got mail concerning this same breach from two different casinos, one of which was Roobet concerning this breach, and our information, including playing records, might be in the hand of someone who is still planning on what to do with it next. We should just be prepared to be receiving mail and scam offers from scammers anytime soon.

[avp2306]

This is not just a breach on Shuffle, but it's a breach that affects all platforms that Fast Track is providing service to. As of yesterday, I got mail concerning this same breach from two different casinos, one of which was Roobet concerning this breach, and our information, including playing records, might be in the hand of someone who is still planning on what to do with it next. We should just be prepared to be receiving mail and scam offers from scammers anytime soon.

This breach affect all platforms use Fast track as their email provider.

Also this incident show that we should not use our main email when dealing risk based entertainment venue and we should always use dummy emails for this to avoid getting any huge financial damages.

Metawin notify us regarding on this breach  https://x.com/MetaWin/status/1976578365818622202

And its good that they are not affected on this situation. But its really unfortunate situation that this is affected lots of big casinos here.

[₿itcoin]

So the emails of their users is what that is only leaked to hackers and nothing more. If you see any message from Shuffle, make sure it is from the gambling site and not from malicious people. You can ask the gambling site customer care about the message if you are not sure. Shuffle will not ask you for your login details and it will not ask you to click on malicious link.

Even if the data leak seems minor to them, it is still a big deal to us. Hackers can use those emails to launch phishing campaigns, impersonating Shuffle or other platforms to trick people. Since crypto transactions are all one way, once they break the security, it is hard to break into their pockets.  Then, the breach also leaked KYC documents &  partial payment info, which could lead to identity theft or a 5 dollar wrench attack.

Shuffle founder Noah Dummett said they were breached through a thirdparty CRM provider called Fast Track &  did not lose login credentials. However, scammers can create very convincing phishing attacks with exposed data.  afaik Shuffle is currently investigating &  is looking into ways to improve the security of the thirdparty system. so yeah we should be cautious during this time.

[DubemIfedigbo001]

This breach affect all platforms use Fast track as their email provider.

Exactly, it wouldn't be long before the platforms starts owing up but would still be bad if they keep silent on it, so far shuffle has done the right thing to alert it's clients since their emails leaked out and could end up in the hands of scammers trying to impersonate them and defraud the clients.

Also this incident show that we should not use our main email when dealing risk based entertainment venue and we should always use dummy emails for this to avoid getting any huge financial damages.

Normally, it's not advisable for users to involve their main or official emails for gambling platforms. I don't try it at all. If would be a great mess that I open my official email in a meeting and it has gambling promotion mails. It's best to have a social email account that is used for these stuffs to increase precision and less distraction beyond financial concerns.

[Findingnemo]

This is not just a breach on Shuffle, but it's a breach that affects all platforms that Fast Track is providing service to. As of yesterday, I got mail concerning this same breach from two different casinos, one of which was Roobet concerning this breach, and our information, including playing records, might be in the hand of someone who is still planning on what to do with it next. We should just be prepared to be receiving mail and scam offers from scammers anytime soon.

This breach affect all platforms use Fast track as their email provider.

Also this incident show that we should not use our main email when dealing risk based entertainment venue and we should always use dummy emails for this to avoid getting any huge financial damages.

Metawin notify us regarding on this breach  https://x.com/MetaWin/status/1976578365818622202

And its good that they are not affected on this situation. But its really unfortunate situation that this is affected lots of big casinos here.

I received the warning from Roobet too because they are also using the fast track service but they clearly mentioned casino funds or operations will not be affected by this because the data break is about the KYC information or something similar so they warn us to keep the email, KYC details could be abused.

[alani123]

Props on them for revealing the breach. This is the reason I use an alias for anything remotely risky.
Now for instance it wasn't even the casino being responsible for the breach but rather a third party tool they were using behind the scenes. As a user you wouldn't even have known how many parties gave access to your data and now it's out for everyone to discover.

Would be good to see more casinos recognizing how they were affected by the breach.

[Die_empty]

If you have email for gambling sites, that means it is also one of your personal emails, unless you did not included it on your device to be receiving messages from it but which I doubt that. If you are receiving messages from it, it will still be the same as your personal email but just that it is better to know how to know phishing messages and avoid online bad actors.

It might be better to have different emails for diverse purposes. The email used for registering in casino shouldn't be the same that is used for formal activities or your job. No platform is immune to hacks, so we would have to put some protective measures in place to reduce the damage will might face if such occurs.   

Exactly, it wouldn't be long before the platforms starts owing up but would still be bad if they keep silent on it, so far shuffle has done the right thing to alert it's clients since their emails leaked out and could end up in the hands of scammers trying to impersonate them and defraud the clients.

Kudos to the management of Shuffle for opening up that they are facing this security breach. Some platforms might keep it secret because they are scared of losing customers. Clients need to know to helped them sensitive and conscious of any information that comes in.