BCLC advises PlayNow users to update passwords after detecting credential stuffing on July 24th.
British Columbia's Lottery Corporation (BCLC) advises PlayNow users to update their passwords after the website detected a "suspiciously high volume of traffic" on July 24th. The high traffic was later confirmed to be "credential stuffing" - a cybercriminal tactic where criminals attempt to access player accounts using email addresses and passwords stolen from other companies, as users often reuse login details across multiple sites. BCLC found no evidence that its systems have been compromised or that player login information was stolen, but it has notified affected players, the Office of the Information and Privacy Commissioner of B.C., the Office of the Privacy Commissioner of Canada, BC Gaming Policy and Enforcement Branch, and RCMP.