Cyber Incident Victim: Lotto Brandenburg
Date:
Dec 2022
Location:
Germany
Summary
A cyberattack targeting a lottery organization disrupted online ticket purchasing services, forcing the shutdown of internet platforms as a security measure. Suspected attackers attempted unauthorized access to customer accounts over a holiday period, impacting multiple regional lottery operators. The organization notified approximately 50,000 online customers about the incident while investigating potential data compromise with law enforcement and data protection authorities. Pre-submitted tickets remained valid for draws, though most transactions typically occur through physical retail locations rather than digital channels. Service restoration timelines remained unspecified during the initial response phase.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
A cyber incident disrupted Lotto Brandenburg's operations around the 2022-2023 New Year period. Between the year-end transition and January 2, 2023, suspected cybercriminals attempted unauthorized access to customer accounts through the organization's online systems. This prompted Lotto Brandenburg to proactively disable its internet services on January 3 as a containment measure, preventing further online lottery ticket submissions. The attack impacted approximately 50,000 registered online customers who relied on digital platforms for ticket purchases. While existing digital tickets remained valid for upcoming draws, new online transactions became unavailable indefinitely, with restoration timelines unspecified during initial response phases.
Lotto Berlin and other regional lottery operators concurrently experienced similar disruptions, collectively taking their websites offline. Lotto Brandenburg immediately initiated forensic analysis to determine whether attackers exfiltrated customer personal data, though conclusive findings regarding data compromise remained pending at the time of reporting. The organization notified affected customers about the service interruption while maintaining standard draw participation for pre-submitted tickets. Authorities including the Brandenburg State Criminal Police Office and the State Data Protection Commissioner were formally engaged to support investigation and regulatory compliance efforts. Physical retail lottery outlets continued normal operations, serving the majority of players who traditionally submit tickets through in-person channels rather than digital platforms.