Brightstar Lottery Group

Brightstar Lottery Group, a gaming and lottery technology vendor, experienced a security breach compromising the personal information of 550 residents, primarily its own employees. The breach involved the unauthorized exposure of data collected from prize winners, though the Connecticut Lottery systems and operations remained unaffected. While no immediate action is required from those impacted, Brightstar has engaged Kroll to offer free identity monitoring services, including credit monitoring, fraud consultation, and identity theft restoration. The Connecticut Department of Consumer Protection (DCP) warned residents to remain vigilant against potential fraudulent requests for personal or financial information, advising them to verify any suspicious communications via DCP.Gaming@ct.gov. The breach highlights risks associated with third-party vendors handling sensitive personal data, even when core operational systems are not directly compromised.

Source: https://www.nbcconnecticut.com/news/local/brightstar-data-breach-impacts-over-500-connecticut-residents/3642187/

TPRM report: https://www.rankiteo.com/company/brightstar-lottery

"id": "bri3202532092425",
"linkid": "brightstar-lottery",
"type": "Breach",
"date": "9/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 550,
                        'industry': 'Gaming and Lottery Technology',
                        'name': 'Brightstar Lottery Group',
                        'type': 'Private Company'},
                       {'industry': 'Consumer Protection',
                        'location': 'Connecticut, USA',
                        'name': 'CT Department of Consumer Protection',
                        'type': 'Government Agency'}],
 'customer_advisories': 'Residents advised to contact DCP.Gaming@ct.gov for '
                        'verification of suspicious communications; free '
                        'identity monitoring offered via Kroll.',
 'data_breach': {'number_of_records_exposed': 550,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (includes personally '
                                        'identifiable information of prize '
                                        'winners and employees)',
                 'type_of_data_compromised': ['Personal information']},
 'description': 'The CT Department of Consumer Protection announced that '
                'Brightstar Lottery Group, a gaming and lottery tech vendor, '
                'experienced a security breach compromising the personal '
                'information of 550 residents, primarily Brightstar employees. '
                'The breach did not impact CT Lottery systems or operations. '
                'Brightstar has hired Kroll to provide free identity '
                'monitoring services (credit monitoring, fraud consultation, '
                'and identity theft restoration) to affected individuals. The '
                'department warned against fraudulent requests for personal or '
                'financial information or payments, advising residents to '
                'verify suspicious communications via DCP.Gaming@ct.gov.',
 'impact': {'data_compromised': ['Personal information of prize winners and '
                                 'employees'],
            'identity_theft_risk': 'High (personal information compromised; '
                                   'identity monitoring offered)',
            'operational_impact': 'None (CT Lottery systems and operations '
                                  'unaffected)'},
 'recommendations': ['Affected individuals should enroll in the free identity '
                     'monitoring services provided by Kroll.',
                     'Residents should verify the legitimacy of any '
                     'communications requesting personal or financial '
                     'information via DCP.Gaming@ct.gov.',
                     'Organizations should ensure third-party vendors handling '
                     'sensitive data implement robust security measures.'],
 'references': [{'source': 'Stream Connecticut News'},
                {'source': 'CT Department of Consumer Protection'}],
 'regulatory_compliance': {'regulatory_notifications': 'CT Department of '
                                                       'Consumer Protection '
                                                       'notified affected '
                                                       'residents'},
 'response': {'communication_strategy': 'Public disclosure via CT Department '
                                        'of Consumer Protection; warning '
                                        'against fraudulent requests; contact '
                                        'email (DCP.Gaming@ct.gov) provided '
                                        'for verification.',
              'incident_response_plan_activated': 'Yes (identity monitoring '
                                                  'services provided via '
                                                  'Kroll)',
              'recovery_measures': 'Free identity monitoring for affected '
                                   'individuals',
              'third_party_assistance': ['Kroll (identity monitoring, fraud '
                                         'consultation, identity theft '
                                         'restoration)']},
 'stakeholder_advisories': 'CT Department of Consumer Protection issued '
                           'advisories to affected residents and the public.',
 'title': 'Brightstar Lottery Group Data Breach',
 'type': 'Data Breach'}