BtoBet data breach: 444K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2020-01-11
In December 2019, a large collection of data from Nigerian gambling company Surebet247 was sent to HIBP. Alongside the Surebet247, database backups from gambling sites BetAlfa, BetWay, BongoBongo and TopBet was also included. Further investigation implicated betting platform provider BtoBet as being the common source of the data. Impacted data included user records and extensive information on gambling histories. Exposed data: dates of birth, email addresses, financial transactions, geographic locations, ip addresses, names, usernames. The breach dates from Dec 26, 2019; Have I Been Pwned loaded it on Jan 11, 2020.
What to do
- If you had a BtoBet account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch