P2013-ND-11

Between December 18, 2012, and January 25, 2013, my Office requested the Organization provide additional information. The additional information was provided by the Organization between January 9 and March 15, 2013. The Organization operates a gaming website. In order to play the games offered on the website, individuals are required to provide information. On August 4, 2012, the Organization determined that an external person(s) gained unauthorized access to its internal network servers. These servers contained four tables containing the personal information of the Organization’s North American players. The Organization reported that the information in each table can be linked through customer identification numbers.