Crown Resorts investigating GoAnywhere data breach

Crown Resorts says it is investigating a potential global data breach but that no customer information has been compromised and business operations have not been impacted.

The gaming and entertainment group has reported being contacted by a ransomware group, which stated that it had illegally acquired a small set of Crown files through GoAnywhere. Crown is one of many organizations that uses the third-party file transfer service, which has been impacted globally by a data breach.

A number of prominent companies employ GoAnywhere – the file transfer software provided by Fortra, a cybersecurity firm based in the United States – for exchanging sensitive and confidential data over the internet.

The Crown announcement follows the recent disclosure by Latitude Financial Services – which also uses GoAnywhere – that the scale of its recent cyberattack was greater than previously thought, with the number of customer records stolen increasing from hundreds of thousands to millions.

However, Crown said business operations have not been impacted as no customer data has been compromised. A spokesperson said the company had notified regulators and was continuing to work with law enforcement.

“We were recently contacted by a ransomware group who claim they have illegally obtained a limited number of Crown files. We are investigating the validity of this claim as a matter of priority,” said a Crown spokesperson.

“We can confirm no customer data has been compromised and our business operations have not been impacted.

“We are continuing to work with law enforcement and have notified our gaming regulators as part of the ongoing investigation and will provide relevant updates, as necessary.”

A statement by the Victoria Police said it was investigating a reported cyberattack “involving a gaming and entertainment group based in Melbourne”.

More gambling news