Shuffle suffers data breach. Do not panic but read what I posted.

[Charles-Tim]

It might be better to have different emails for diverse purposes. The email used for registering in casino shouldn't be the same that is used for formal activities or your job. No platform is immune to hacks, so we would have to put some protective measures in place to reduce the damage will might face if such occurs.

You did not understand me correctly. I am not implying having many emails to be wrong, but what that is most important is that you should be able to know how to avoid phishing attacks. If you are not able to avoid phishing attacks, having many emails does not mean anything until you have been attacked. Right now I have more than 10 emails that I used for different things, but I still learn how to avoid phishing attacks.

[Natalim]

Now unsolicited messages are showing up pretending to be Shuffle Casino, saying they can reopen your account. If you get phished and there’s balance in the account, you’ll probably lose it. Still, I doubt most gamblers will fall for that, we’re generally sharp about risks and scam types in the crypto space.

I did get a breach notification because I had an old Shuffle account and my email was subscribed, but I ignored it... with what has happened, i think here's what i realized.. Lesson learned: if an email is important for gambling or finance, create a separate dedicated address for it. that way you limit exposure if a breach happens.

[Strongkored]

Players will click on emails sent by casinos about bonuses or offers because this is what I experienced, that's why I think it's better not to checlist when registering in the column that do you want to receive promotional emails and other news, because the smaller the chance of players getting emails so when they get emails from the casino it will increase their alertness. Using a second email to register is also an option so if our data is hacked it's not a problem because it's just the second email.

[Hispo]

Welp, this is quite serious.
Kudos to casinos who allow their gamblers to be aware of this incidents, so all of us can be careful with emails and ignore the fishing attempts...
This reminds me to what happen some years ago with Ledger, when their email service provider leaked all emails of their clients.

Sadly, I assume attackers and hackers will bet for a massive fishing campaign instead of going for spear fishing, on the other hand, if there is some information of deposits and balances getting leaked with this breach, then I am afraid hackers will go first after the biggest gamblers and try to empty their wallets.

Be careful everyone and stay safe from those criminals who will try to go for your satoshis.

[stadus]

Players will click on emails sent by casinos about bonuses or offers because this is what I experienced, that's why I think it's better not to checlist when registering in the column that do you want to receive promotional emails and other news, because the smaller the chance of players getting emails ....

But it’s not always a bad thing either. We subscribe so we can know if they’re giving bonuses or promos we can grab. Why wouldn’t we sign up just because of phishing scams? I think what really matters is making sure we have 2FA enabled so our accounts won’t get hacked easily.

And every time we click something, especially when we’re redirected to a link, we should always double-check if the URL is legit. I mean, we’re not newbies anymore, especially for those of us active in forums where warnings about phishing scams are always being shared by concerned users.

[Dunamisx]

receiving updates should come directly from the major source and that is why most of these platforms have their customer representative to reach out on, if we are not sure of any offers received, we may inform them and confirm, scam attempts now are everywhere, scammers will send random messages to people online with the original content not coming from the intended site, we have to be careful and at alert, it may be the newest trick targeted on gamblers to hack them.

[kotajikikox]

You can get the information from X
https://x.com/noahdummett/status/1976558783229985080

That is co-founder and CEO of Shuffle, Noah Dummett posting about the incident on X.

The reason for this thread is to let people know that they should avoid phishing messages. According to what Noah Dummett posted, third party providers, Fast Track, suffered a data breach that exposed their users’ data. Fast Track is a CRM software that they (and many others in the gaming industry) use for programmatic email sending and various communications with users.

So the emails of their users is what that is only leaked to hackers and nothing more. If you see any message from Shuffle, make sure it is from the gambling site and not from malicious people. You can ask the gambling site customer care about the message if you are not sure. Shuffle will not ask you for your login details and it will not ask you to click on malicious link.

Make sure you access the site through their correct URL and not from email.

Just ignore messages when you know you didn’t request anything. Don’t open the email or any link associated and just contact the casino right away and ask if there’s anything wrong or any breach. Let’s be smart because there’s so many ways now to scam people but it’s also easy to avoid them if you just know enough.

[mcdouglasx]

Exactly as you mentioned, you should never access links from email. There are cases where, even from a legitimate (hacked) email, they send links to users to a site where, by entering their private information, they steal it. You should only trust links that match the official page, and only when you are the one who requested it.
By this I mean, for example, if you requested a password change and it requires a link, it will arrive immediately after you request it. If you receive a similar email without having requested it, it is already a warning sign.

[dimonstration]

I thought all data was safe when I initially read the content of the email warning but since email was exposed I believe this is very dangerous to all Shuffle players that typically claim bonus from email.

I think they should send all their users a standard email informing them of the data leak and giving them proper directive on how not to fall for scams, also users should be carefully informed how to recognize explicitly the email address of Shuffle so they're able to ignore scam emails that would come from identical email addresses with very little/negligible differences.

This is the tricky part. Not all users read their users thoroughly especially the notification email since some user might consider it as a regular mail.

Lucky for us here in the forum that we discussed it here so everyone is already aware while user outside here only rely on the email that can be overlooked while the hacker has the complete details of members enouh to send scam promotion.

[Renampun]

After this data leak I am sure that there will be many users who get phishing emails containing links that will direct them to fake websites that look like official login pages, and there is a high possibility that users can get viruses or have their personal information stolen when they visit these links, so users need to be careful when they receive emails that claim to be from Shuffle, always check that the domain is correct and make sure the link you want to visit really uses the official domain belonging to Shuffle.

[Ishicryptic]

Thanks OP for sharing this important information, it is not only useful for gamblers on Shuffle, but also to those of us that uses other sites for gambling, the best way to avoid getting scammed and hacked is to be well informed. The golden rule when you are online is not to click on what you don't fully understand and don't be in a haste to supply personal information when told to do so. Gamblers and internet users that are well informed cannot fall for these scams, they look and see the red flag immediately, it is always newbies and those that are careless that always becomes victims.

[Orpichukwu]

Kudos to the management of Shuffle for opening up that they are facing this security breach. Some platforms might keep it secret because they are scared of losing customers. Clients need to know to helped them sensitive and conscious of any information that comes in.   

Shuffle is not the only casino which you should be praising; the majority of the affected casinos have already made an open announcement regarding this either on their social media page or through email and other means necessary. Any platform which is keeping quiet and doesn't disclose this type of issue to their customers is causing those customers more danger than good.

[Beparanf]

After this data leak I am sure that there will be many users who get phishing emails containing links that will direct them to fake websites that look like official login pages, and there is a high possibility that users can get viruses or have their personal information stolen when they visit these links, so users need to be careful when they receive emails that claim to be from Shuffle, always check that the domain is correct and make sure the link you want to visit really uses the official domain belonging to Shuffle.

So far everything is normal on my side. I’m a shuffle player too in the past but I already stop playing since last year after the first airdrop was concluded so all good on me even if hacker send a phishing link since I don’t open anymore and promotional email from them.

My concern now is the hacker might sell our credentials to other casino that will cause a lot of spam mail from new casino that I don’t an account.

Spam mail is hard to deal especially if it’s using an email blaster that sent frequent mail.

[Franctoshi]

If you have email for gambling sites, that means it is also one of your personal emails, unless you did not included it on your device to be receiving messages from it but which I doubt that. If you are receiving messages from it, it will still be the same as your personal email but just that it is better to know how to know phishing messages and avoid online bad actors.

It might be better to have different emails for diverse purposes. The email used for registering in casino shouldn't be the same that is used for formal activities or your job. No platform is immune to hacks, so we would have to put some protective measures in place to reduce the damage will might face if such occurs.  

Exactly, it wouldn't be long before the platforms starts owing up but would still be bad if they keep silent on it, so far shuffle has done the right thing to alert it's clients since their emails leaked out and could end up in the hands of scammers trying to impersonate them and defraud the clients.

Kudos to the management of Shuffle for opening up that they are facing this security breach. Some platforms might keep it secret because they are scared of losing customers. Clients need to know to helped them sensitive and conscious of any information that comes in.    

The management team of Shuffle actually did well 👏 in sharing this very information as it happened, because this will make the Shuffle clients be on alert for  potential scammers phishing email links. Secondly,  there's this feature I use on the Binance and Bybit apps that I activated with a 4-digit number; any email that comes directly from the Binance platform comes with that 4-digit number showing it is actually from the platform. This feature would be a very good tool for Shuffle users right now so they’re able to differentiate which email is coming directly from Shuffle and not fall into the hands of these scammers.

[xLays]

This is not just a breach on Shuffle, but it's a breach that affects all platforms that Fast Track is providing service to. As of yesterday, I got mail concerning this same breach from two different casinos, one of which was Roobet concerning this breach, and our information, including playing records, might be in the hand of someone who is still planning on what to do with it next. We should just be prepared to be receiving mail and scam offers from scammers anytime soon.

Yes, it was the third party provider that was breached, not shuffle.com itself.
I think the OP should consider editing the thread title since it might cause misunderstanding and make it seem like Shuffle was directly affected.
I’m not saying this just because I advertise them, but because it’s the right thing to do.

I also received emails from both Roobet and Shuffle.com with the subject Notice of Data Breach at Fast Track..

Here’s a portion of the email:

Fast Track recently experienced a security breach where an unauthorized party accessed their internal systems and obtained certain user data. This may include details like your name, email, and historical activity data.

To be totally clear — your Roobet account, passwords, crypto wallets, and funds are safe. None of that information is or was stored with Fast Track.

[Alphakilo]

The recent data breach involving Shuffle via its third-party provider, Fast Track offers several key lessons for both businesses and users alike, mostly as it regards online services and crypto currency.
This is often the period where hackers don't sleep because it's a end of year rush and so one must always be very cautious before clicking on any links or opening new mails.

After reading the whole story, I felt sorry for Shuffle, but this all is how other competitors brace up or get chewed by hackers and scammers.  

For those who intend to go into such businesses involving crypto currency, please triple do a background check on the third party vendor of choice.
Strict rules should be in place with the aim to limit data and other KYC data exposure despite any believe that hackers don't need to steal one's credentials.
Steps should also be put in place to mitigate any such risk of data breach and exposure of clients or user details and information on the site.

[khiholangkang]

This is not just a breach on Shuffle, but it's a breach that affects all platforms that Fast Track is providing service to. As of yesterday, I got mail concerning this same breach from two different casinos, one of which was Roobet concerning this breach, and our information, including playing records, might be in the hand of someone who is still planning on what to do with it next. We should just be prepared to be receiving mail and scam offers from scammers anytime soon.

It's better to avoid anything that tries to get in, they definitely don't just carry out attacks on one casino but many casinos that work together, and yes, they click carelessly with the emails they send, whatever is ordered on our email, being careful is much better than taking risks, and fortunately I read this thread and after checking there are indeed many emails with the same motive.

[Ronsbit]

The management team of Shuffle actually did well 👏 in sharing this very information as it happened, because this will make the Shuffle clients be on alert for  potential scammers phishing email links. Secondly,  there's this feature I use on the Binance and Bybit apps that I activated with a 4-digit number; any email that comes directly from the Binance platform comes with that 4-digit number showing it is actually from the platform. This feature would be a very good tool for Shuffle users right now so they’re able to differentiate which email is coming directly from Shuffle and not fall into the hands of these scammers.

That move is a quick one from the management because irmt would further avert any unforeseen events that may occur through that phishing link that they may likely send to their customers through email. So it is best they had informed their community in time to be at alert if they eventually receive such mails them they should know it is the act of scammers who wants to steal the details to undo them.
I also have activated this feature you are talking about and I do receive messages just as you have said. I believe this features would help when it comes to account protection.

[Wapfika]

This is not just a breach on Shuffle, but it's a breach that affects all platforms that Fast Track is providing service to. As of yesterday, I got mail concerning this same breach from two different casinos, one of which was Roobet concerning this breach, and our information, including playing records, might be in the hand of someone who is still planning on what to do with it next. We should just be prepared to be receiving mail and scam offers from scammers anytime soon.

Yes, it was the third party provider that was breached, not shuffle.com itself.
I think the OP should consider editing the thread title since it might cause misunderstanding and make it seem like Shuffle was directly affected.
I’m not saying this just because I advertise them, but because it’s the right thing to do.

I also received emails from both Roobet and Shuffle.com with the subject Notice of Data Breach at Fast Track..

Here’s a portion of the email:

Fast Track recently experienced a security breach where an unauthorized party accessed their internal systems and obtained certain user data. This may include details like your name, email, and historical activity data.

To be totally clear — your Roobet account, passwords, crypto wallets, and funds are safe. None of that information is or was stored with Fast Track.

Correct, Fast track is a 3rd party that handles the promotional email of casino. I believe many casino use their services so the affected user is on wide scale not only with Shuffle players.

This incident is a pain in the ass for all user that leaked their details since there’s always a chance now that they will click a scam email even though they don’t subscribe on it.

I believe affected casino can support a change email feature so that user can abandon exposed email.

[Odusko]

receiving updates should come directly from the major source and that is why most of these platforms have their customer representative to reach out on, if we are not sure of any offers received, we may inform them and confirm, scam attempts now are everywhere, scammers will send random messages to people online with the original content not coming from the intended site, we have to be careful and at alert, it may be the newest trick targeted on gamblers to hack them.

we need to opt out games as to how we watch out for scammers attempts, this is very important and in most time we have to align with one fundamental truth and that is, scammers easily get those that are greedy, so what we need to do is to always look away from offers that get sent to us unsolicited. If we can avoid them, we are sure of making the right decision and keeping our inbox clean from spammers and scammers.