zerofox logo
Advisories

Breach Disclosure: BtoBet

|by Alpha Team

banner image

Breach Disclosure: BtoBet Platform

A breach in the betting platform BtoBet has led to the compromise of gambling sites Surebet247, BetAlfa, BetWay, BongoBongo, and TopBet. In total, details related to 444,000 users have been leaked, including transaction history and bet details.

Recommendations

  • If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
  • If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
  • Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Details

BtoBet is a platform commonly used by betting sites. After multiple African and South American gambling websites were breached in January 2020, the platform began investigating a potential security vulnerability. As of January 9th, the company no findings have been released regarding this investigation. Security researchers on Twitter have also said that the company has actively blocked anyone on Twitter who is discussing this breach.

Tags: data breach, global, media/entertainment