Gaming company Aristocrat has confirmed that it was targeted by a cyber attack earlier this year during which the personal information of company employees was stolen.
In a statement, the company said that the attack took place around June 1st 2023, when a hacker exploited a newly identified vulnerability in MOVEit, a third-party file sharing software used by Aristocrat.
According to the statement, data extracted during the incident included personal information of Aristocrat employees. Extracts of the data were then reportedly published online.
Once the hack was discovered the company immediately rectified the vulnerability and notified the authorities and the employees of the incident. Aristocrat has also stated that it has offered affected employees complimentary credit monitoring and identity theft protection services.
In its statement, the company said:
“Aristocrat has completed its risk assessment of any potential impact to its business arising from this incident.
Based on the information available as at this date, Aristocrat expects low business impact with the execution of an appropriate risk management and mitigation plan. We will continue to manage this incident proactively and comprehensively, in the best interests of our people, business and other stakeholders.”
Earlier this year, Aristocrat was forced to postpone the launch of New South Wales cashless gaming trial run after it was revealed that a cyber attack targeted the network of Banktech, the tech company that has been tasked with running and maintaining cashless gaming operations.
In March of this year, Crown Resorts was also the target of a cyber attack that targeted its third-party file transfer service GoAnywhere.