All Breaches
November 17, 2024 Verified Sensitive Record Gaming

Brightstar Lottery Group 2024 Data Breach

The 2024 Brightstar Lottery Group (IGT) data breach involved unauthorized access to certain corporate systems. The U.S. Department of Health and Human Services Office for Civil Rights reported that 103,879 people were affected.

103.9 Thousand
Affected People
8
Data Types
High
Severity
Oct 9, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

1 sensitive8
  • Medical information
  • Names
  • Contact information
  • Dates of birth
  • Government issued IDs
  • Driver's license numbers
  • Social security numbers
  • Financial account information

About This Breach

Brightstar Lottery Group is a global lottery operator and provider of gaming technology and solutions that previously operated under the IGT Group name.

How Was the Incident Discovered?

IGT Group and Brightstar Lottery Group detected unauthorized access to certain corporate systems on November 17, 2024. The companies resecured affected systems, began an investigation, and reported the event to law enforcement.

What Information Was Affected?

The affected fields varied by person and may have included names, contact information, dates of birth, government-issued identification documents or numbers, driver's-license numbers, Social Security or other tax identifiers, financial-account information, and health data.

Review and Response

The detailed data review was completed on August 21, 2025. The companies say they continued monitoring their systems, introduced additional safeguards, and offered eligible individuals 24 months of identity monitoring.

What Should Affected People Do?

Notice recipients should review account activity, credit reports, and health records for activity they do not recognize. The companies said they were not aware of misuse as of the notice, but suspicious requests should still be verified through official channels.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information