Victorian Racing Club hit by Medusa ransomware gang, over 100GB of data exposed
Learn More
The Medusa ransomware gang has claimed responsibility for the attack and posted 128.1 gigabytes of VRC data to its darknet leak site. The hackers demanded US$700,000 for deletion of the data, the same amount for anyone else to buy the data and US$10,000 for a one-day extension of the deadline.
VRC has hired leading experts to assist with the response and investigation and yhe Australian Cyber Security Centre has been informed. The club is investigating to determine whether there has been unauthorized access to their data.
Data Exposed:
- Financial details of gaming machines
- Prizes won by VRC members
- Customer invoices
- Marketing details
- Names
- Email addresses
- Mobile phone numbers
No details are disclosed about the number of affected individuals.
The stolen data includes information about gaming machines administered by Aristocrat Games and operated at Headquarters Tavern, Flemington Race Course. At least one email address belongs to an employee of SA Health, South Australia’s health department. Historical data includes information related to deceased racing identity Bart Cummings. Some data appears to date as recently as 2023.
