Lansing, MI - As excitement builds ahead of the upcoming Super Bowl, Michigan Attorney General Dana Nessel urges residents to be aware of potential scams, cybersecurity risks, and deceptive internet gaming sites.
A third-party marketing company, MailChimp, recently reported a cyber-attack that may have affected popular sites including DraftKings, FanDuel, and BetMGM. If you believe you have been impacted by the breach, visit Data Breaches: What to Do Next Consumer Alert.
“This data breach is another reminder to always monitor your bank accounts, credit reports, and credit card statements,” Nessel said. “Bad actors are always looking for new ways to rob you of your identity and your savings, and the Super Bowl is no exception.”
AG Nessel shares the following tips on how to protect yourself in a new video Tips for Online Gamblers.
In the aftermath of a breach, bad actors may try to log into the breached accounts, or any other account, using your email address and password. There are steps you can take to regain control and protect your personal information:
- Stay alert. If your personal information was exposed, the affected company should notify you. Save all notices and follow their recommended steps.
- Secure your accounts. Change all exposed passwords. If you use that password for other accounts, change those passwords as well. Always use strong passwords.
- Set up a two-step or multi-factor authentication requirement for each account. Most financial and social media sites have this option. This requires users to use a second form of identification, usually a PIN number, to log in.
- Freeze your credit if your social security number or financial information was included in the breach. This stops data thieves from opening an account in your name while the freeze is in place. You can place a credit freeze by contacting each of the three major credit bureaus:
- Equifax online or by calling 888-378-4329
- Experian online or by calling 888-397-3742
- TransUnion online or by calling 800-680-7289
- Monitor your financial accounts and credit reports.
- Delete accounts you are not using.
What we Know about the Breach
DraftKings has disclosed that more than 67,000 of its customers had their personal data exposed during the attack. The data includes name, address, phone number, email, profile photo, and the last four digits of the customer's payment card. Social security numbers, driver’s license information, or financial account numbers do not appear to be affected.
FanDuel Sportsbook has sent a warning email to customers that the data breach exposed their names and email addresses only. They do not believe customer passwords, financial account information, and other personal information were released.
BetMGM states the breach resulted in the release of some names, postal addresses, emails, telephone numbers, birthdays, hashed Social Security numbers, account IDs, and transaction data. They claim their passwords or account funds were not accessed. They are offering two years of credit monitoring to impacted customers.
Michigan licensed internet sports betting platforms partner with Detroit and Tribal casinos to allow consumers to place bets through websites or mobile apps for a variety of sporting events. Use the following tips to protect yourself from predatory and misleading sports betting platforms:
- Research the online platform. Read reviews on sites like the Better Business Bureau (BBB) and Trust Pilot. Avoid reviews from sites that are connected to the sports betting industry.
- Read the fine print. Platforms sometimes require users to gamble their own money before accessing the advertised bonus. Not all bets count toward those promotions.
- Know the risks. Risk-free bets may not be what they seem. Some platforms are offering “risk-free bets” of $1,000 or more. Often, if a user loses their bets, they don’t get their money back. Instead, it becomes a credit that can only be used to gamble on that platform.
- Know the restrictions on accessing your account. Platforms reserve the right to restrict a user’s activity without warning — not just for suspicion of illegal conduct. Platforms have suspended users for having an “unfair advantage” or “irregular playing patterns.” Platforms have also been known to freeze accounts when someone is doing well or when trying to withdraw winnings.
If you plan to bet on the Super Bowl or other sporting events, check the Michigan Gaming Control Board (MGCB) website for a list of licensed internet sports betting providers and information on legal leagues and bets.
“The ease of online betting may cause consumers to forget they are gambling with real money,” said Nessel. “Protect yourself and your livelihood by protecting your personal information, only betting on licensed platforms, and setting limits for how much you spend.”
Nessel reminds residents that gambling should be a form of entertainment and encourages Michigan residents to develop guidelines for when and how much to gamble. If gambling is a problem for you or someone in your life, seek help through the Michigan Problem Gambling Help Line online or by calling 800-270-7117.
Residents can report illegal or suspicious gambling activity to the MGCB at:
- 888-314-2682 – a dedicated phone line for anonymous tips,
This email address is being protected from spambots. You need JavaScript enabled to view it. are not anonymous
Consumer protection is just a click or call away. To report a scam, file a complaint or get additional information, contact the Michigan Department of Attorney General:
Consumer Protection
P.O. Box 30213
Lansing, MI 48909
517-335-7599
Fax: 517-241-3771
Toll free: 877-765-8388
Online complaint form