The festive cheer of the Christmas weekend was marred for the Ohio Lottery when it fell victim to a cybersecurity incident. On December 27, 2023, it was announced that the state lottery’s computer systems had experienced significant disruptions due to this unforeseen event. The timing of the incident could not have been worse, coinciding with one of the busiest seasons for lottery purchases and prize claims.
The cyber attack, which occurred on Christmas Eve, left many players in uncertainty. While retail sales of draw games and scratch tickets continued without interruption, the ability to cash winning tickets over $599 through mobile platforms or at designated ‘super retailers’ was compromised. This disruption has undoubtedly caused inconvenience to winners looking forward to their holiday winnings.
#CyberIncidents The Ohio Lottery faced a cyber incident on December 24, 2023, disrupting access to winning numbers on their site and app. Customers were directed to retailers for number checks.
Read More: https://t.co/eeoGsEfGGN #Ohio #Lottery #Betting #Cybercrime #DragonForce pic.twitter.com/caHzXWRlwl— ✇ ⚪🛡 CyberMaterial ✪ (@Cybermaterial_) December 28, 2023
In response to the incident, the Ohio Lottery Commission took immediate action by disconnecting key systems to contain the breach. This decisive move was part of a series of precautionary steps to safeguard the lottery’s environment and prevent further damage. An internal investigation was promptly initiated, and although it is still in the early stages, it is being conducted thoroughly to ascertain the full scope and impact of the cybersecurity event.
The commission has been transparent in its communications with the public, providing updates and guidance through statements on the Ohio Lottery website. They have assured customers that winning numbers can still be checked via the website, mobile application, or any Ohio Lottery retailer. However, they also noted that the winning numbers for KENO and Lucky One, as well as updated EZPLAY® Progressive jackpots, are currently unavailable.
Ohio Lottery cyber incident on Christmas Eve compromises mobile cashing https://t.co/7W1EZLPnBl
— Securityblog (@Securityblog) December 27, 2023
For those lucky enough to have winning tickets, the lottery has provided clear instructions on how to proceed. Prizes up to $599 can still be cashed at any Ohio Lottery Retailer location. For prizes over $600, winners have been directed to mail their claims to the Ohio Lottery Central Office or use the digital claim form available online. This interim solution, while not ideal, ensures that winners can still receive their prizes.
The inability to use the mobile cashing app or visit Super Retailer locations for cashing prizes greater than $599 remains a significant inconvenience. The Ohio Lottery has promised to notify the public once these services are back online. In the meantime, they have expressed gratitude for the understanding and patience shown by their customers during this challenging period.
This incident serves as a stark reminder of the ever-present threat of cyber attacks and the importance of robust cybersecurity measures. As we become increasingly reliant on digital platforms for services like the lottery, the need for vigilant security protocols becomes more critical. The Ohio Lottery’s experience highlights the potential vulnerabilities that can be exploited by malicious actors, especially during times when systems are under heavy use.
As the investigation continues, the Ohio Lottery is working diligently to restore all affected services and reinforce its defenses against future cyber threats. The commitment to resolving the issue swiftly and securely is evident, and it is hoped that normal operations will resume soon, allowing players to enjoy the lottery experience with confidence once again.
