Share

Related Links

Related Stories

  • The Spy Who Hacked Me
    James Bond was more of a jock than a nerd, and he probably wouldn’t have known how to use a computer, says Danny Bradbury. How things have changed…
  • Data Breach Spring
    Infosecurity’s Drew Amorosi examines three data breach incidents from the past few months that, by their nature, keep security vendors in business, regulators busy, and CISOs up at night. Find out why industry observers think this rash of massive breaches could lead to a ‘PCI for consumer privacy’
  • Interview: EA's Spencer Mott
    From London’s Metropolitan Police to VP and CISO at Electronic Arts, Spencer Mott has had a colorful career with little end in sight. Here, he talks to Eleanor Dallaway about what the information security industry is up against, how the Sony breach impacted the whole industry, and how EA suffered a breach of its own in 2011
  • Comment: Where the CISO Should Sit
    The CISO position is making a comeback, but if not strategically positioned in an organization, it can become a powerless figurehead – competing for mindshare and budget with other “functional” operations. Ed Adams of Security Innovation points out why a CISO can be far more effective if reporting to the CEO (or highest ranking risk officer) instead of the CIO
  • Security Education: A Lesson Learned?
    Despite users being the most integral part of information security, only one to two percent of security budgets are being spent on awareness and education. Stephen Pritchard reports

Top 5 Stories

News

Hackers are gambling that casino databases will have big payoff

19 January 2011

Hackers are targeting Las Vegas casinos’ customer databases in order to gain access to personal financial information or steal players club points, according to gaming regulators.

The Nevada Gaming Control Board is investing several cases of hackers accessing casino customer databases, Jerry Markling, chief of the board’s Enforcement Division, told the Las Vegas Review-Journal. "We've been seeing a lot of cases involving players club programs and the stealing of points", he said.

Players club programs are loyalty programs that provide points to frequent customers of the casinos; these points can be used toward rooms, food, shows, and even cash rebates.

The board sent a letter in December to casinos reminding them of the state’s customer confidentiality laws and their obligations to protect customer information and review customer database security.

“With respect to these databases, the board has recently investigated numerous incidents where such databases have been compromised and the potential for identity information theft existed. Additionally, as technology advances and more and more information is stored in these databases, they will almost certainly become an even more inviting target for cybercriminals….All of these things create a need for stronger safeguards and periodic reviews of existing policies in order to comply with existing laws aimed at ensuring the protection of such information from unauthorized access”, the letter said.

State gaming officials are also concerned about the casinos’ smartphone applications, which often require users to enter personal information. Criminals are also hacking into these applications to access financial information about the customers, the newspaper noted.

This article is featured in:
Application Security • Data Loss  • Internet and Network Security • Wireless and Mobile Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.