BreachExchange mailing list archives

For sale: Personal details of millions of Ladbrokes gamblers


From: Jon Turner <jjturner () gmail com>
Date: Mon, 25 Jan 2010 19:43:36 +0000

http://www.dailymail.co.uk/news/article-1245622/For-sale-Personal-details-millions-Ladbrokes-gamblers.html

The confidential records of millions of British gamblers who bet with top
bookmaker Ladbrokes have been offered for sale to The Mail on Sunday.

The huge data theft is now at the centre of a criminal investigation after
this newspaper was given the personal information of 10,000 Ladbrokes
customers and offered access to its database of 4.5 million people in the UK
and abroad.

Last night we alerted Ladbrokes to the damaging security breach and handed
the customer files to the Information Commissioner's Office (ICO), Britain's
data watchdog, which immediately began to investigate.

The records include customers' home addresses, details of their gambling
history, customer account numbers, dates of birth, phone numbers and email
addresses.

Ladbrokes last night also called in the police and began contacting
customers to reassure them that their credit card details, passwords and
other financial information were safe.

The database was offered for sale by a mysterious Australian. He claimed to
be a computer security expert who had worked at Ladbrokes in Britain.

During protracted negotiations via email and in one phone call, the man, who
gave his name only as 'Daniel', claimed to represent a company based in
Melbourne, Australia.

The company, DSS Enterprises, is run by Dinitha Subasinghe, a Sri
Lankan-born IT expert.

Last night, Mr Subasinghe denied any involvement in the data theft. He
designs websites and also runs a wedding planning business with his
British-born girlfriend Charlene King.

Australia's companies house describes Mr Subasinghe as a 'sole trader'. His
recent work has involved designing websites for estate agents in Melbourne,
but he also lists Ladbrokes and the UK Ministry of Defence as clients.
_______________________________________________
Dataloss-discuss Mailing List (dataloss-discuss () datalossdb org)
Archived at http://seclists.org/dataloss/

Get business, compliance, IT and security staff on the same page with
CREDANT Technologies: The Shortcut Guide to Understanding Data Protection
from Four Critical Perspectives. The eBook begins with considerations
important to executives and business leaders.
http://www.credant.com/campaigns/ebook-chpt-one-web.php

Current thread: