Luxembourg National Lottery suffers data breach through subcontractor cyber attack
Learn More
The Luxembourg National Lottery (Loterie Nationale) is reporting a data breach affecting customer information following a cyber attack on one of its subcontractors.
The incident was reported on Friday, September 5, 2025, and involved unauthorized access to personal data of sports betting customers using the loteriesport.lu platform. The cyber attack targeted the IT systems of a subcontractor responsible for operating and maintaining the loteriesport.lu sports betting platform.
The attack enabled unauthorized access to customer databases containing sensitive personal information. Exposed data includes:
- Customer names
- Home addresses
- Phone numbers
- Bank account details
The number of affected individuals is not disclosed.
The Luxembourg National Lottery claims that passwords and credit card information were not compromised during the incident. Per General Data Protection Regulation requirements, the Loterie Nationale notified all potentially affected individuals about the security incident and provided guidance on protective measures. The company also filed the mandatory breach notification with authorities.
