Casino Data Jackpot – For Hackers: Merkur’s API Disaster

A couple of days ago, I saw a Mastodon post from Lilith Wittmann in my timeline. She linked to an article on her Medium page detailing a catastrophic security failure at Merkur AG. You can find the original Mastodon post here.

The casino company Merkur AG and its service providers have made almost all the data available in their casino systems publicly accessible. This includes payment data, gaming sessions, and copies of the ID cards of over one million players.

Lilith Wittmann’s Medium Post (German)
Continue reading Casino Data Jackpot – For Hackers: Merkur’s API Disaster