BCLC advises players to change PlayNow passwords following ‘credential stuffing’ incident

The BC Lottery Corporation (BCLC) is advising PlayNow users to update their passwords following a recent incident.

According to the BCLC, PlayNow detected a suspiciously high volume of traffic on the site on July 24th.

After the data was reviewed, PlayNow identified the traffic was the result of “credential stuffing,” where criminals attempt to access player accounts using email addresses and passwords previously exposed or stolen from other companies.

Credential stuffing works on the premise that people often use the same user ID and password across multiple websites.

“This is a deeply concerning incident and a cautionary tale for everyone with multiple online accounts,” said BCLC President and CEO Pat Davis.

“Our investigation remains ongoing, and we have found no evidence that our systems have been compromised, or that player login information was stolen from our systems.”

PlayNow says impacted players’ accounts were locked due to suspicious activity immediately after determining credential stuffing had taken place, and measures were taken to block suspicious traffic.

The BCLC is advising all PlayNow users to change their passwords as a precautionary measure.

“Integrity and security are at the core of our business and our games,” Davis said.

“We are committed to continuing our ongoing evaluation and enhancement of PlayNow security controls to maintain the safety of our players’ information going forward.”