Cyber Incident Victim: Unibet
Date:
Apr 2015
Location:
Isle of Man
Summary
Unibet and other online poker operators experienced service disruptions due to distributed denial-of-service (DDoS) attacks, which flooded their servers with illegitimate requests, causing severe lag, disconnections, and login failures. The operator's platforms, including poker rooms and sportsbooks, became temporarily inaccessible, forcing tournament cancellations and refunds. Similar attacks previously affected other networks, highlighting recurring targeting of online gaming infrastructure by such malicious traffic floods aimed at overwhelming systems and disrupting operations.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 4 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In mid-April 2015, multiple online poker platforms, including Unibet, Betfair, and PokerStars, experienced sustained Distributed Denial of Service (DDoS) attacks that disrupted operations from Friday through Monday. The attacks flooded gaming servers with illegitimate communication requests, overwhelming their capacity to process legitimate traffic. Betfair publicly confirmed the attack had disabled its websites, sportsbook, and betting exchange, though its technical team restored services by the following day. Unibet was explicitly named as another confirmed victim of similar attacks, though specific operational impacts beyond service disruption weren't detailed in available reports. PokerStars did not formally acknowledge an attack, but widespread player reports described severe lag, login failures, tournament cancellations, and disconnections coinciding with the incident timeframe. Technical evidence suggested infrastructure vulnerabilities, as one of PokerStars' six hosting providers—Manx Telecom on the Isle of Man—remained completely offline during the attacks, forcing customer data through overloaded remaining hosts.
The attacks rendered games unplayable across affected platforms for multiple days, directly impacting tournament schedules and cash game availability. Historical context indicated this was part of a recurring pattern, with the Winning Poker Network having canceled a $1 million guaranteed tournament in December 2014 after similar DDoS disruptions. While Betfair confirmed successful mitigation, Unibet's restoration timeline wasn't specified. PokerStars technicians attempted to address connectivity issues but faced persistent problems tied to the nonfunctional Manx Telecom host. No threat actors claimed responsibility, and the attacks' financial impact on operators or customers remained undisclosed. Service normalization occurred gradually across the industry by Monday, though the incident highlighted persistent DDoS vulnerabilities in online gaming infrastructure.