Forums

General Betting

Welcome to Live View – Take the tour to learn more
Start Tour
There is currently 1 person viewing this thread.
Marxist-Leninist
08 Sep 11 14:29
Joined:
Date Joined: 26 Nov 07
| Topic/replies: 3,381 | Blogger: Marxist-Leninist's blog
regarding stolen customer information?
Pause Switch to Standard View Anyone else had a letter from Bet24?
Show More
Loading...
Report Marxist-Leninist September 9, 2011 12:28 AM BST
Nobody? They had all their customer details (email, address, passwords, credit card numbers, i.e. the works) "stolen" in 2009 and have just got round to telling their customers now. "You should change your password for all of your betting accounts" raised a chuckle, but dear me.... Cry
Report Lori September 9, 2011 3:49 AM BST
Not me, but that's an amusing/scary enough post to deserve a reply! Shocked
Report Alex the old wrinkled retainer September 9, 2011 6:53 AM BST
Maybe Peckover only recently asked for his Bet24 offence to be taken into account.
Report ebasson61 September 9, 2011 8:23 AM BST
I've received the letter - although I fall into the second category of people who have had the basic information stolen (mainly account information). I haven't used this account for several years, so the card details are dead anyway.

Not sure what the legal liability is of Bet24 if anyone has anything stolen as a result of this hacking.
Report Gin September 9, 2011 9:18 AM BST
Shocking! [smiley:crazy]

.
https://www.bet24.com/content-important-info.htm

Important Security Information

25 July  2011

For the attention of customers with BET24 accounts registered before 31 October 2009

Important Security Information - Please Read Carefully

We have been informed by police authorities that they have arrested third party individuals who were in possession of unauthorised copies of personal customer information relating to various companies including BET24. The BET24 customer information was stolen from BET24 by means of illegal electronic access to our database, which is believed to have taken place in December 2009. We have no information to indicate any unauthorised access to our database or breach of our security systems since December 2009, and we have no reason to believe that accounts registered after 31 October 2009 are affected in any way.

FOR CUSTOMERS WITH ACCOUNTS REGISTERED AS AT 28 APRIL 2007, the stolen information comprises:

    a list of customer names, postal addresses, email addresses, dates of birth, BET24 account user names, BET24 account user ID numbers, BET24 account passwords and BET24 account balances, and, in some cases, telephone numbers and IP addresses
    a second separate list of BET24 account user ID numbers, BET24 account balances and parameters, customer payment card expiry dates, encrypted customer payment card numbers and encoded customer payment card types

The encrypted payment card information has NOT to our knowledge been decrypted, and review by internet security specialists confirms that the level of encryption is very high. In addition, NO payment card security codes are stored on the BET24 database. The stolen information is so far known to have been used to access a limited number of customers’ BET24 accounts, third party accounts and personal email accounts. A small number of customers have alerted us to unauthorised activity on their BET24 accounts and we have fully reimbursed them for any financial loss incurred on their accounts. At the bottom of this letter, you will find the security advice and action points that we recommend you to follow immediately.

FOR CUSTOMERS WITH ACCOUNTS REGISTERED BETWEEN 28 APRIL 2007 & 31 OCTOBER 2009, the stolen information is more limited and comprises:

    a list of BET24 account user ID numbers, BET24 account balances and parameters, customer payment card expiry dates, encrypted customer payment card numbers and encoded customer payment card types

This stolen information does NOT include any personal details or passwords and is NOT therefore sufficient to enable access to accounts. Furthermore, we are not aware of any instances of illegal access to these accounts. The encrypted payment card information has NOT to our knowledge been decrypted, and review by internet security specialists confirms that the level of encryption is very high. In addition, NO payment card security codes are stored on the BET24 database. At the bottom of this letter, you will find the general security advice that we advise all BET24 customers to follow.

We are working closely with the police authorities to establish how the information was stolen, how it has been used, and which customers are affected.

We implemented a thorough security review in 2010, which included an audit by industry specialists and simulated hacker penetration tests, and we have further upgraded the security of our network. The BET24 passwords for all customers who had registered accounts as at 28 April 2007 were reset during 2010. We continue to monitor our systems and customer transactions constantly, and to upgrade our systems regularly.

Our customers are our number one priority and the security of your personal information is of paramount importance to us. Please contact our customer service support team by email at support@bet24.com if you have any questions relating to the above.

Yours sincerely,
Thomas Petersen, Chief Executive Officer



RECOMMENDED SECURITY ACTION POINTS

FOR CUSTOMERS WITH ACCOUNTS REGISTERED AS AT 28 APRIL 2007:

    If you have ever used your BET24 password for your email account, then please immediately change your email account password and then change all passwords that you use for any other accounts including your BET24 account
    If you have not used your BET24 password for your email account but have used it for any other services or accounts, please immediately change the passwords for such services or accounts
    If you believe that your BET24 account has been compromised in any way, please contact us immediately by email at support@bet24.com
    Please remain vigilant and regularly review your bank account and payment card statements
    Please ensure that any requests for personal data or resetting of access codes and passwords that you have previously received, or receive in future, via email, phone and post are from trustworthy parties and in accordance with the terms and conditions of the service or account provider to which they relate

FOR CUSTOMERS WITH ACCOUNTS REGISTERED BETWEEN 28 APRIL 2007 & 31 OCTOBER 2009:

    If you believe that your BET24 account has been compromised in any way, please contact us immediately by email at support@bet24.com
    Please avoid using the same passwords for different services or accounts and please immediately reset any such passwords to be different for each service and account
    Please regularly review your bank account and payment card statements
    Please ensure that any requests for personal data or resetting of access codes and passwords that you receive via email, phone and post are from trustworthy parties and in accordance with the terms and conditions of the service or account provider to which they relate
Report Marxist-Leninist September 9, 2011 4:21 PM BST
They may as well close down now, who is going to use this shower again? I tried logging into my account and it said the username and password were wrong. Only thing that has saved me a great deal of trouble and loss of money is the fact that I had added a second digit to the end of my usual password.
Report ShaneESP September 9, 2011 4:27 PM BST
Just received this letter today, I fall into the second category too and haven't used the account for a long time so card details are dead but I must say after this would never use them again either.
Report Gin September 9, 2011 4:35 PM BST
So they posted the above on their website in July but only got around to posting letters to customers this week!!!?? [smiley:crazy]
Report Marxist-Leninist September 9, 2011 4:48 PM BST
"We were told by our database manager in December 2009 that someone had made an illegal intrusion into the system but they had copied no data. We only knew of a limited number of breaches, which we handled on a case by case basis, where we advised and reimbursed the customers.

Very recently we were informed by police authorities that they have arrested third party individuals who were in possession of unauthorised copies of personal customer information relating to various companies including BET24.

We have been asked by the police not to disclose what country the investigation is taking place, due to the ongoing investigation, hence we can’t comment further on questions relating to this subject."
Report Marxist-Leninist September 9, 2011 4:51 PM BST
To sum up:

- They knew they had been hacked in December 2009.

- Customers had accounts hacked and money taken.

- The police arrested someone for possession of data.

- They decided to tell everyone as it would have come out anyway.
Report ShaneESP September 9, 2011 5:06 PM BST
yep.

They changed all passwords in 2010 and didn't tell customers why. They knew about the the hack but it took until November 2010 to change passwords (I just checked the email I got at the time).

AS said above they tell everyone now as it was coming out anyway.
Report the silverback September 9, 2011 5:13 PM BST
are they worth having an account with? they seem to be one of the few sites i've never come across.
Report ebasson61 September 9, 2011 10:36 PM BST
I only ever used them when I was going through my "matched gambling" phase, scooping-up all the free bets from the various bookies. Haven't used them since.

... and never will again.
Post Your Reply
<CTRL+Enter> to submit
Please login to post a reply.

Wonder

Instance ID: 13539
www.betfair.com