CSIDB logo
Incident

Lotto Brandenburg

Incident posture

Attack window
Dec 2022
Location
Germany
Status
Historical
CIA posture
Available to members
Updated
2025-10-15 00:00

Linked entities

Victim
Lotto Brandenburg
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Dec 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A cyberattack targeting a lottery organization disrupted online ticket purchasing services, forcing the shutdown of internet platforms as a security measure. Suspected attackers attempted unauthorized access to customer accounts over a holiday period, impacting multiple regional lottery operators. The organization notified approximately 50,000 online customers about the incident while investigating potential data compromise with law enforcement and data protection authorities. Pre-submitted tickets remained valid for draws, though most transactions typically occur through physical retail locations rather than digital channels. Service restoration timelines remained unspecified during the initial response phase.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

A cyber incident disrupted Lotto Brandenburg's operations around the 2022-2023 New Year period. Between the year-end transition and January 2, 2023, suspected cybercriminals attempted unauthorized access to customer accounts through the organization's online systems. This prompted Lotto Brandenburg to proactively disable its internet services on January 3 as a containment measure, preventing further online lottery ticket submissions. The attack impacted approximately 50,000 registered online customers who relied on digital platforms for ticket purchases. While existing digital tickets remained valid for upcoming draws, new online transactions became unavailable indefinitely, with restoration timelines unspecified during initial response phases.

Lotto Berlin and other regional lottery operators concurrently experienced similar disruptions, collectively taking their websites offline. Lotto Brandenburg immediately initiated forensic analysis to determine whether attackers exfiltrated customer personal data, though conclusive findings regarding data compromise remained pending at the time of reporting. The organization notified affected customers about the service interruption while maintaining standard draw participation for pre-submitted tickets. Authorities including the Brandenburg State Criminal Police Office and the State Data Protection Commissioner were formally engaged to support investigation and regulatory compliance efforts. Physical retail lottery outlets continued normal operations, serving the majority of players who traditionally submit tickets through in-person channels rather than digital platforms.

Sources

Sources available to members: 1 source.

CSIDB