UPDATE TO LOTTERY SECURITY INCIDENT FAQS

February 15, 2024

As the investigation continues into the cybersecurity incident that occurred on December 24, 2023, we now know that information belonging to our customers and retailers which was obtained by an unauthorized third-party appears to have been leaked.

Protecting our consumers and retailers remains a top priority of the Lottery. Out of an abundance of caution, we urge you to be vigilant in monitoring your account statements for fraudulent or irregular activity.

There are steps that can be taken right away to help protect personal information, including placing a fraud alert or security freeze on credit files and obtaining and monitoring a free credit report.

To do so, customers can contact any of the three credit bureaus listed below.

While the cybersecurity investigation is ongoing, the State wants to reiterate that if any consumer data was compromised, it will take all measures to assist with credit monitoring to protect Ohioans. We will notify all known affected individuals as quickly as possible and in accordance with applicable laws.

We appreciate your understanding as we work through this issue.

1. Is it safe to buy an Ohio Lottery ticket?
   Yes. The cybersecurity incident did not involve the gaming system. It is safe to purchase any Ohio Lottery game.

2. Is the Lottery still cashing prizes?
   Yes. All cashing options are now available. To learn more, please visit: https://www.ohiolottery.com/Claiming/How-To-Claim.

3. Were any of the game's algorithms affected?
   No. The incident did not involve any Ohio Lottery games or the technology systems on which the Lottery operates.

4. What happened?
   On December 24, 2023, the Ohio Lottery experienced a security incident impacting some of our systems. Immediately upon detecting this activity, the Ohio Lottery took steps to mitigate the threat, including taking certain systems offline. The Ohio Lottery also quickly engaged professionals experienced in handling these types of incidents to assist us with an investigation and to assess the full scope of information impacted. The Ohio Lottery has notified law enforcement.

5. What is the Ohio Lottery doing in light of this incident?
   We are committed to maintaining the privacy of information and integrity of our games. We are investigating to determine how this incident happened and what data may have been impacted. Our investigation is still ongoing. As more information is available, we will provide additional updates.

6. Was employee/customer information impacted?
   We are analyzing our internal systems for any compromise to determine what information was impacted by this incident or is at risk. This investigation is ongoing. We will notify all known impacted individuals as quickly as possible and in accordance with applicable laws. This means that if we learn that your personal information was impacted, we will provide notice in an accepted way.

7. How do I know if my information was involved in this incident?
   We are analyzing our internal systems for any compromise to determine what information was impacted by this incident or is at risk. This investigation is ongoing. We will notify all known affected individuals as quickly as possible and in accordance with applicable laws. This means that if we learn that your personal information was impacted, we will provide notice in an accepted way.

8. Will you be notifying individuals directly of this incident?
   The investigation is ongoing, including identifying specific persons affected and the type of data that was affected. We will notify all known affected individuals as quickly as possible and in accordance with applicable laws. This means that if we learn that your personal information was impacted, we will provide notice consistent with our legal obligations.

9. Will you provide me with credit monitoring services?
   Following the results of the forensic investigation, the State will provide appropriate notice, including any appropriate remedies to affected individuals.

10. Does the Ohio Lottery have any reports of actual misuse of Lottery information as a result of this incident?
    As the investigation continues, we now know that information belonging to our customers and retailers which was obtained by an unauthorized third-party appears to have been leaked. We are analyzing our internal systems to determine what information was impacted by this incident or is at risk. This investigation is ongoing.

11. How can I check my numbers to see if I won?
    Winning numbers can be checked using the Ohio Lottery website and mobile application or at any Ohio Lottery Retailer.

12. Are the Winning Numbers and Jackpots Up to Date on the Website and Mobile App?
    Yes, winning numbers and the next jackpot for all draw games are updated as soon as the drawing is complete.

13. Can I use the mobile cashing app or go to a Super Retailer location to cash my prize above $600?
    Yes. All cashing options are now available. To learn more, please visit: https://www.ohiolottery.com/Claiming/How-To-Claim.

14. Who can I call for assistance?
    You can contact us phone at (888) 348-3372 or via web here: https://www.ohiolottery.com/Contact-Ohio-Lottery.