Casino fish tank breach exposed 10GB of high-roller data

Darktrace disclosed a 2017 incident in which attackers used an internet-connected lobby aquarium at an unnamed casino to move laterally into the corporate network and steal about 10 GB of data, including a high-roller customer database. The data was routed to a server in Finland; neither the casino nor the attackers were identified.

• Attackers pivoted from the IoT fish tank to the high-roller database
• About 10 GB of data was exfiltrated to a server in Finland
• Ex-Darktrace CEO Nicole Eagan disclosed the 2017 breach in 2018
• The tank sat on a separate network, yet segmentation failed