DragonForce Ransomware Forces Ohio Lottery to Shut Down: Gaming System Still Operational
The Ohio Lottery has fallen victim to a targeted cyberattack on Christmas Eve, resulting in the shutdown of crucial internal systems linked to undisclosed applications. The responsible hacking group, known as DragonForce ransomware, has claimed responsibility for the breach.
Despite this setback, the Ohio Lottery assures its users that its gaming system remains fully operational. However, certain services have been temporarily affected. Mobile cashing and prize cashing above $599 at Super Retailers are currently unavailable.
Additionally, winning numbers for KENO, Lucky One, and EZPLAY Progressive Jackpots cannot be accessed on the website or mobile app. However, they are available at any Ohio Lottery Retailer.
To mitigate the inconvenience caused by the cyberattack, customers are advised to refer to the Ohio Lottery website and mobile app for winning numbers during this period. Prizes up to $599 can be claimed at any Ohio Lottery Retailer, as reported by WKYC. For prizes exceeding $600, individuals are required to process their claims either through mail to the Ohio Lottery Central Office or via the digital claim form.
A press release issued by the lottery states, On December 24, 2023, the Ohio Lottery experienced a cybersecurity incident impacting some of its internal applications and immediately began work to mitigate the issue. The state internal investigation is ongoing. We apologize for the inconvenience and are working as quickly as possible to restore all services.
While the Ohio Lottery has refrained from directly attributing the attack to any specific threat actors, the emerging DragonForce ransomware gang has publicly accepted responsibility. According to Bleeping Computer, the group claims to have encrypted devices and gained access to sensitive data, including participants’ Social Security Numbers and dates of birth.
The DragonForce gang asserts that the compromised files contain information pertaining to over 3,000,000 individuals, encompassing names, addresses, emails, winning amounts, Social Security Numbers, and dates of birth. With over 600 gigabytes of leaked data, concerns about the scale of the breach are mounting.
Although the DragonForce gang is relatively new, their tactics and data leak site suggest a seasoned extortion group. As law enforcement agencies intensify their efforts against ransomware operations, the emergence of new groups like DragonForce raises questions about potential rebranding within the threat landscape.
In a separate incident, the official Facebook page of the Philippine lottery system was hacked by unknown individuals. Witnesses reported that the culprit spammed the page with explicit photos, prompting the Philippine Charity Sweepstakes Office (PCSO) to temporarily shut down the page for investigation by the Cybercrime Investigation and Coordinating Center (CICC).
As investigations into the Ohio Lottery cyberattack continue, it is crucial for users to remain vigilant and take the necessary precautions to safeguard their personal information. The Ohio Lottery will continue its efforts to restore all services and ensure the security of its systems.
In conclusion, the DragonForce ransomware gang’s attack on the Ohio Lottery has caused significant disruptions, leading to the shutdown of internal systems. The gaming system, however, remains unaffected. The incident serves as a reminder of the ongoing threat posed by cybercriminals and the importance of robust security measures to protect sensitive data.
