
PlayNow is asking all players to update their account passwords. A recent incident involved passwords being stolen from other companies’ sites which impacted a percentage of the PlayNow account base.
BCLC operates PlayNow in British Columbia, Saskatchewan and Manitoba. In Saskatchewan they operate in partnership with the Saskatchewan Indian Gaming Authority.
On July 24 PlayNow detected a suspiciously high volume of traffic on the site. After reviewing the data, PlayNow identified the traffic was the result of “credential stuffing” – where criminals attempt to access player accounts using email addresses and passwords previously exposed or stolen from other companies. Credential stuffing works on the premise that people often use the same user ID and password across multiple websites.
BCLC says their investigation remains ongoing, but they have found no evidence that their systems have been compromised, or that player login information was stolen. BCLC also says players should make sure they aren’t using the same passwords for other websites and that their passwords aren’t easy to guess.