Crown Resorts acknowledged they were affected by the GoAnywhere security breach.
In early February, a cybersecurity company called Forta revealed a previously unknown weakness in the GoAnywhere file transfer program. This flaw, which persisted for ten days, potentially enabled hackers to remotely run commands on compromised devices, and it’s estimated that approximately 130 entities experienced data compromises during this period. Crown Resorts issued a communication verifying that a cybercriminal organization reached out to them asserting possession of some of the company’s data. A representative for Crown Resorts indicated that “We are able to verify that a small quantity of files were compromised, including some staff attendance records and a segment of Crown Sydney’s member registry.” They proceeded to state, “We can affirm that no client private data was exposed as a component of this event.” Although the attendance information does pertain to both active and past employees, it does not encompass confidential financial details such as banking credentials, salary data, or tax identification numbers. The leaked membership information also did not include any client private data, with the figures merely displaying a series of particular digits in circulation.
The spokesperson further indicated that their team was diligently attempting to establish contact with all parties involved. They emphasized taking extra precautions regarding the quantity of users affected as a safety measure.
The Crown organization is dedicated to collaborating with authorities and regulatory bodies to resolve this digital security event.