Merkur Group casino users not only lose their money but also their data

[Pokerface]

The following just came out. I have used google translate for most of the article and posted here. Link to article at the bottom.

Merkur Group casino users not only lose their money but also their data

The casino company Merkur AG and its service providers have made almost all of the data stored in their casino systems publicly accessible. This includes payment details, gaming sessions, and ID copies of over a million players. A treasure trove of data for researchers, but a disaster for users.

Merkur AG (formerly Gauselmann) operates several casinos in Germany, including merkurbets.de, crazybuzzer.de, and slotmagie.de (licensed by Merkur to "the mill adventures"). These are operated by various Maltese companies that are subsidiaries of Merkur AG.

The portals all use the casino software of the Maltese company "the mill adventures." The following data, among others, can be easily queried via the casino backend's GraphQL interface:

Player's first and last name

Player ID, which is also used by the German Gambling Authority (GGL) to collect statistical data. These gaming statistics can be requested from the GGL as part of a GDPR request.

Payment data, including data on the following payment service providers:

TRUSTLY (104,291) — IBANs, account holders, partial addresses
PAYPAL (120,900) — Email addresses, partial addresses
PAYLADO (1,971) — Account holder, telephone number
PAYSAFECARD (26,536) — Name, date of birth, partial address
ADYEN (128,965) — Name, IBAN, partial address, credit card details
PAYMENT_IQ (31,487) — Name, IBAN/credit card details, partial address
SKRILL (912) — Email

See full article here:
https://lilithwittmann.medium.com/ca...n-ef6710184f7c

[universal4]

So is the timeline of update posted by the article writer?

17.03–21:30 While uninstalling my cryptowallet, I noticed that one of the withdrawals from the illegal casinos was successful — I therefore stole €200 from a casino and added this to the article above.

Did the person that wrote the article just admit they also stole some money?

Rick
Universal4

[eenzoo]

Did the person that wrote the article just admit they also stole some money?

Rick
Universal4

Yes. Clearly written in German language!

[universal4]

Thanks for clarifying that I was wondering if something got lost in the translation.

Rick
Universal4