Casinos Austria warns 150,000 customers after cyberattack

Casinos Austria says data belonging to about 150,000 customers may have been taken in a cyberattack on its online shop, ORF reports. The Vienna-based company has closed the security vulnerability.

The attackers gained unauthorised access to a system operated by an external service provider between November 2 and 5, the company told affected customers by email. The exact records involved are still being investigated.

Possible data taken include customers’ first and last names, email addresses, orders and voucher codes. Bank and credit card details were not affected because the company does not store them, spokesperson Patrick Minar told ORF.

Casinos Austria warned customers that the information could be used for targeted phishing or identity fraud, including orders placed in their names. It advised them not to click links or attachments in unexpected messages and never to share passwords or credit card details.

The company has notified the data protection authority. Cybersecurity experts are investigating, and it remains unclear who was behind the attack.