Threat Intelligence & APT The Record 1 month ago

Slovenian casinos reopen after cyberattack knocked gaming systems offline

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: CRITICAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Image: Jarosław Kwoczała / Unsplash Slovenian casinos reopen after cyberattack knocked gaming systems offline One of Slovenia’s largest gambling and tourism groups has begun reopening its casinos after a cyberattack forced them to shut down for several days. Hit, which operates casinos, hotels and other tourism businesses in Slovenia and Bosnia and Herzegovina, said it detected a cybersecurity..."

Recommended Defense & Mitigation

  • Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
  • Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Casino
Image: Jarosław Kwoczała / Unsplash

Slovenian casinos reopen after cyberattack knocked gaming systems offline

One of Slovenia’s largest gambling and tourism groups has begun reopening its casinos after a cyberattack forced them to shut down for several days.

Hit, which operates casinos, hotels and other tourism businesses in Slovenia and Bosnia and Herzegovina, said it detected a cybersecurity incident early last week. The attack on the company’s servers forced six Hit-operated casinos to close for roughly three days.

In a statement Friday, Hit said it had restored enough of its IT infrastructure to gradually reopen the affected casinos, but some gaming functions and its loyalty system remained unavailable. Guests were initially limited to a selection of slot-machine games while the company worked to restore other systems and applications.

“Maintaining and further strengthening our IT infrastructure and security will remain one of the company’s development priorities going forward,” Sandi Bratasevec, chairman of Hit’s management board, said in a statement.

Hit has not provided a further update on whether operations have since fully returned to normal. As of Monday, the notice on the company’s website still said it was operating on a limited basis, with table games and bingo not yet available.

The company has disclosed few details about the attack, and has not said whether any data was stolen or disclosed how hackers gained access to its systems. It has also not said whether a ransom was demanded or paid.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →