DraftKings and BetMGM Announce November Data Leaks

• DraftKings and BetMGM both released statements alerting customers of data breaches.
• Both state-based legal sports betting sites admitted to private information such as credit card numbers, addresses, and player names getting released.

BOSTON – According to both DraftKings and BetMGM, the two popular state-regulated sports betting sites in the United States announced that they have uncovered data breaches that have led to their customers’ information getting stolen.

DraftKings Data Breach

Based on DraftKings’ statement regarding their cyber-attacks, the biggest gamble players made was not on any game or any daily fantasy contest, but it was simply using their legal sports betting site.

In a statement, DraftKings notified the public of nine different personal data points that were stolen in the data breach that affected 67,995 customers:

• Customer Name/Account Name
• Last Four Digits of Payment Card
• Address
• Email Address
• Phone Number
• Account Balance
• Prior Transactions
• Profile Photo
• Last Date of Password Change

DraftKings announced that the CVV of players’ credit cards, Social Security numbers, and driver’s license numbers were not stolen. Financial account numbers were also not stolen.

The data breach was exposed at the end of November, with DraftKings’ stock price falling from $15.52 to $11.60 since the start of the month.

BetMGM Data Breach

After putting out an announcement on Monday, December 21, BetMGM has expanded upon its data breach that began in May 2022 and was uncovered on November 28, 2022.

The key points in the data release suggest similar personal data was stolen from BetMGM’s site as was hacked from DraftKings:

• Customer Name/Account Name
• Address
• Date of Birth
• Email Address
• Phone Number
• Hashed Social Security Number

BetMGM did not find any evidence of funds getting stolen, although the sports betting site is still in contact with law enforcement on how to proceed.

News tags: BetMGM | DraftKings