Curaçao gaming authority experienced unauthorized access to their portal

[lombok]

It's the internet. Information is very important, as it could lead to many things. Passwords and security questions could help them open accounts, or even simple email addresses can be sold on the black market. Just finding the wrong evil man or group that buys that information, because they will use it for more evil things like phishing or making a scam email and sending it all to the email addresses that they bought. Somehow, one or two fools will bite on it, and that's where they will get their money back.

Hacking into the gambling license issuing authority highlights the growing rash behavior of cyber gangs. Leakage of confidential data not only harms the reputation of the regulators but is also used as the main source of numerous scams that target regular citizens without any security measure.

Trading in identities in the black market makes way for extortion and account takeovers. People who fall victim to the scam of social engineering bring immediate profit to the criminal gang, proving that digital data is now the main instrument for money laundering.

[Smack That Ace]

Do you think that the hacker mistakenly hacked into Curaçao portal?

Do people hack government authority's portal by mistake? LOL. This was by no means any accident!

According to my perspective, they want used that information to open social media accounts, impersonate high profile individuals and potentially scam other people using their identity.

And assuming hacker would breach such massive portal merely to run scam using fake social media account is gross underestimation of them.
Besides CGA database doesn't just hold basic player information. It contain data on hundred of offshore casino, corporate shareholding structure, bank account detail, regulatory compliance document and many more.
If this data falls into the hands of hacker then they could easily target wealthy owners to carry out phishing or extortion.
The implication are far more serious than just setting up a fake Twitter account.

[Somegory]

That's why they are called hackers, no one will steal something they don't need, even if it sound stupid in your ears doesn't mean they don't have a purpose to why they steal those data.

I still wish that there is a way these platforms get rid of their data after verification, this is just a friendly opinion, I don't think I need to create a topic and this.

What if there is a way for exchanges to instantly get rid of the data they collected for verification purposes after they are done with it? So when hackers attacks they won't find any stored data anywhere.

[Free Market Capitalist]

Do you think that the hacker mistakenly hacked into Curaçao portal?

Do people hack government authority's portal by mistake? LOL. This was by no means any accident!

Of course not.

I still wish that there is a way these platforms get rid of their data after verification, this is just a friendly opinion, I don't think I need to create a topic and this.

What if there is a way for exchanges to instantly get rid of the data they collected for verification purposes after they are done with it? So when hackers attacks they won't find any stored data anywhere.

Lol. That doesn't make sense. If exchanges or casinos were to delete your data, how would they know whose money is whose? It's like a bank: you go there, deposit your money, and if they delete all the data, how would they know who that money belongs to?

The fact is that criminals are increasingly turning to the internet, and both companies and institutions are going to have to step up their game.

[YellowSwap]

If you are not a hacker you will never understand, hackers hack anything they can get to make money, whatever their goal is right here it still leads to making more money, hackers don't waste time where they can't find anything.

What I belief is if these hacks aren't happening, the vulnerabilities will be present, it will keep gathering until one day it will get out of hands, imagine multiple platforms getting hacked in a single day?

It's a good thing that vulnerability like this are been detected, it brings losses I understand but it's for the safer future, they need to start going the optimal security ways to avoid getting hacked in the future.

[o48o]

I was just thinking about this, and while this data is clearly valuable and reason seem an obvious one, my mind starts to wander.

Casinos get hacked all the time, KYCs leak and that's old news to everyone. Now i am not blaming CEOs for hackers exploiting their systems and stealing IDs this but what if someone is? What would be better payback then get CEO's IDs stolen if they believe they were accountable for the gambler's stolen ID?

And that would just be another motive on top of highly valuable digital loot. Compared to hacking casinos, there wouldn't get as many IDs but they would be so much more valuable to sell, or to use as a tool in social engineering.

[PX-Z]

Casinos get hacked all the time, KYCs leak and that's old news to everyone.

If you're talking of online casinos, then this is false. Casinos were not getting hacked everytime as you said, at least not as too frequent as exchanges. The last known casino hacked aside from Duelbits (wallet) was Shuffle (data breach) last year, then Stake (wallet) and some physical casino resort (with online platform too) with ransom malware, and that was 3 years ago already. So its not everytime or all the time.

... What would be better payback then get CEO's IDs stolen if they believe they were accountable for the gambler's stolen ID?

Nothing, unless they initiate to do something as good faith. Those payback are useless unless you do it with legal actions, sue them and take your lawyer, money and time to do your legal rights.

[suzanne5223]

Casinos get hacked all the time, KYCs leak and that's old news to everyone.

If you're talking of online casinos, then this is false. Casinos were not getting hacked everytime as you said, at least not as too frequent as exchanges. The last known casino hacked aside from Duelbits (wallet) was Shuffle (data breach) last year, then Stake (wallet) and some physical casino resort (with online platform too) with ransom malware, and that was 3 years ago already. So its not everytime or all the time.

Maybe s/he was talking about a data breach, which is something i believe is common with online casinos, but in the future that may change because the hot wallets of online casinos are also being targeted lately due to how hackers were able to use the help of AI to spot out vulnerabilities of some crypto platform holding and model of operation.

[lombok]

I was just thinking about this, and while this data is clearly valuable and reason seem an obvious one, my mind starts to wander.

Casinos get hacked all the time, KYCs leak and that's old news to everyone. Now i am not blaming CEOs for hackers exploiting their systems and stealing IDs this but what if someone is? What would be better payback then get CEO's IDs stolen if they believe they were accountable for the gambler's stolen ID?

And that would just be another motive on top of highly valuable digital loot. Compared to hacking casinos, there wouldn't get as many IDs but they would be so much more valuable to sell, or to use as a tool in social engineering.

Targeting prominent individuals brings whole new level to cyber crime. Revenge has become the excuse for profile takeover, which allows hacker to direct the fury of those whose information has been compromised at the boss who runs the show.

Even though there are only few of them, the names of prominent individuals cost astronomical amount of money on the black market. This kind of privileged access enables social engineering manipulation at its highest levels.

[Hispo]

...Compared to hacking casinos, there wouldn't get as many IDs but they would be so much more valuable to sell, or to use as a tool in social engineering.

With this kind of information which was stolen from Curaçao Gaming Authority, I believe it is all about getting as much information as possible to find ways to spear-fish casino operators and people tightly involved in the administration of casinos.
Curaçao as regulator does not likely have information on gamblers and clients, but since they deal with licenses, they have become an important target for hackers and exploiters.

Casino operators now need to be very careful with social engineering and spear fishing attacks, specially if they hold a license issued by Curaçao.