Verify Accounts... Is Stake Ever Going to Learn ?

[ByteMeTwice]

Got this in my inbox today..  !!!

Seems that Stake is still hellbent on farming players data, despite the FACT that they had a MAJOR Data Breach only a matter of Days ago...  !!

 

Before the high-horsey people, get up on their high horses to attack this post and try to defend the indefensible, .

It doesn't matter where (or who for that matter) has been allocated the responsibility of protecting players personal and private details,

The buck Stops with Stake Management, who are ultimately responsible for ALL aspects of safety and privacy of players account details. THIS INCLUDES EMAIL ADDRESSES.. !!

 

To try and argue the point that players email addresses were only accessed for a short time breached is a complete insult to people's intelligence,

It only takes a few seconds to copy & paste or download an entire database...  !!

Another tactic that Stake has used to try and minimize the seriousness of this Hacking Event, was to completely deny any responsibility for this breach by blaming their email service for these Leaks and Breaches.

If, indeed, there was no such hack...  the only other explanation is an inside Job..  Not sure which is more serious.....

THE FACTS ARE :

Fake emails were sent from a specific address which is only accessible to a small number of Stake employees..

An earlier Breach (a couple of weeks before the email fiasco) where funds allocated for Twitter bonus drops were stolen was covered up and all related tweets were removed.. !!!

 

Also, this is factually incorrect :

It is Obviously safer for you If Stake don't have your Details................. !!!

Remember this :

THERE IS NO SUCH THING AS A MINOR DATA BREACH

THERE IS NO SUCH THING AS A MINOR DATA LEAK

 

[jungl3]

Stake still haven't released an official statement or explanation about what happened?

Piss poor.

 

[ByteMeTwice]

11 hours ago, jungl3 said:

Stake still haven't released an official statement or explanation about what happened?

Piss poor.

 

From Previous Experiences, there's hardly likely to be any statements or explanations either !!

[jungl3]

11 hours ago, ByteMeTwice said:

From Previous Experiences, there's hardly likely to be any statements or explanations either !!

No, indeed.

I had a quick Google and, if I understood correctly, companies operating out of Curaçao have no requirement to have a data compliance officer or to notify users of data breaches. Somehow they actually went above and beyond with their abstract telegram message and short forum posts. Fucking incredible 😆

I'm curious how many money laundering incidents it would take for the Netherlands to put heavy pressure on Curaçao to tidy up or for the Dutch to actively investigate the situation themselves. That would make a good Netflix docuseries.

 

[TzTokTikTok]

Curaçao may well not have data protection laws but I would imagine that some of the countries in which Stake operates do.

 

Regardless, it displays a distinct lack of customer care not to disclose a serious data breach. I have never felt less valued as a customer.

 

Proper disclosure and an apology is the most basic bitch common sense thing to do here. The bare minimum of what would be considered good business practice.

[ByteMeTwice]

On 11/28/2022 at 12:29 AM, jungl3 said:

No, indeed.

I had a quick Google and, if I understood correctly, companies operating out of Curaçao have no requirement to have a data compliance officer or to notify users of data breaches. Somehow they actually went above and beyond with their abstract telegram message and short forum posts. Fucking incredible 😆

I'm curious how many money laundering incidents it would take for the Netherlands to put heavy pressure on Curaçao to tidy up or for the Dutch to actively investigate the situation themselves. That would make a good Netflix docuseries.

 

It's all very complicated and peculiar.  Stake take great advantages of these complications..

From What I have learned so far:

1/ Curacao don't recognize these licenses..  Even though they're issued there..  !!

2/ If any data is belonging to any citizen of any EU Country, the company or entity holding such data is bound by EU data protection Laws, irrespective of where in the world the data is held.

3/ (gets a wee bit messy here and I may not be 100% correct) Data Breaches concerning EU citizens are reported to the resident country.  Then referred to Republic of Ireland to investigate as Ireland is the nominated country for supervisory authority..

I've been trying to get my head around this & untangle it for months now..  But as usual, EU regulations are never straightforward.

One good thing is, Ireland aren't afraid of the big boys.  Just a few days ago, it Fined Meta (Facebook) €265 Million for data scraping..  On the downside.. It's hard to get them involved when it comes down to personal circumstances..

[jungl3]

21 hours ago, ByteMeTwice said:

It's all very complicated and peculiar.  Stake take great advantages of these complications..

...

I've been trying to get my head around this & untangle it for months now..  But as usual, EU regulations are never sstraightforward.

It's a noble pursuit and I applaud you for your efforts. With good lawyers and research anything is possible in business, so hats off to stake for working every loophole they can.

Given the history of slot providers being economical with the truth, the shady setup of stake and the gambling industry in general, then combined with crypto.. There have to be some skeletons in some closets. I'm looking forward to a Panama papers style exposé or an 8 part coffeezilla Collab one day, breaking it all down.