Close Menu
TechBrunchTechBrunch
  • Home
  • AI
  • Apps
  • Crypto
  • Security
  • Startups
  • TechCrunch
  • Venture

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

What's Hot

Learn how to raise seed rounds from top VCS in 2025

July 10, 2025

Belkin will no longer support most WEMO devices and their WEMO apps

July 10, 2025

Mockly has actually created a fake DM generator that is user-friendly

July 10, 2025
Facebook X (Twitter) Instagram
TechBrunchTechBrunch
  • Home
  • AI

    OpenAI seeks to extend human lifespans with the help of longevity startups

    January 17, 2025

    Farewell to the $200 million woolly mammoth and TikTok

    January 17, 2025

    Nord Security founder launches Nexos.ai to help enterprises move AI projects from pilot to production

    January 17, 2025

    Data proves it remains difficult for startups to raise capital, even though VCs invested $75 billion in the fourth quarter

    January 16, 2025

    Apple suspends AI notification summaries for news after generating false alerts

    January 16, 2025
  • Apps

    Belkin will no longer support most WEMO devices and their WEMO apps

    July 10, 2025

    Mockly has actually created a fake DM generator that is user-friendly

    July 10, 2025

    YouTube removes its trending pages and now trend list

    July 10, 2025

    As X loses CEO, daily use is decreasing and competition is growing

    July 10, 2025

    Google adds inter-image generation capabilities to VEO 3

    July 10, 2025
  • Crypto

    Vitalik Buterin reserves for Sam Altman's global project

    June 28, 2025

    Calci will close a $185 million round as rival Polymeruk reportedly seeks $200 million

    June 25, 2025

    Stablecoin Evangelist: Katie Haun's Battle of Digital Dollars

    June 22, 2025

    Hackers steal and destroy millions of Iran's biggest crypto exchanges

    June 18, 2025

    Unique, a new social media app

    June 17, 2025
  • Security

    French police arrest Russian basketball player accused of ransomware: Report

    July 10, 2025

    Authorities arrest four hackers related to UK retail hacking

    July 10, 2025

    Jack Dorsey says his “safe” new bitchat app hasn't been tested for security

    July 9, 2025

    Get the exhibition tables on TechCrunch Confuse 2025

    July 9, 2025

    How to protect your mobile number from SIM swap attacks

    July 9, 2025
  • Startups

    7 days left: Founders and VCs save over $300 on all stage passes

    March 24, 2025

    AI chip startup Furiosaai reportedly rejecting $800 million acquisition offer from Meta

    March 24, 2025

    20 Hottest Open Source Startups of 2024

    March 22, 2025

    Andrill may build a weapons factory in the UK

    March 21, 2025

    Startup Weekly: Wiz bets paid off at M&A Rich Week

    March 21, 2025
  • TechCrunch

    OpenSea takes a long-term view with a focus on UX despite NFT sales remaining low

    February 8, 2024

    AI will save software companies' growth dreams

    February 8, 2024

    B2B and B2C are not about who buys, but how you sell

    February 5, 2024

    It's time for venture capital to break away from fast fashion

    February 3, 2024

    a16z's Chris Dixon believes it's time to focus on blockchain use cases rather than speculation

    February 2, 2024
  • Venture

    Learn how to raise seed rounds from top VCS in 2025

    July 10, 2025

    Save up to $475 for 5 days to all stages before prices rise

    July 10, 2025

    David George on the Future to be released in 2025

    July 9, 2025

    Edo Liberty explores missed links for Enterprise AI in 2025

    July 9, 2025

    Avoid the pitfalls that stall startup funding with TC at every stage

    July 9, 2025
TechBrunchTechBrunch

'World's Biggest Casino' App Reveals Customers' Personal Information

TechBrunchBy TechBrunchFebruary 9, 20243 Mins Read
Facebook Twitter Pinterest Telegram LinkedIn Tumblr WhatsApp Email
Share
Facebook Twitter LinkedIn Pinterest Telegram Email


The startup that develops the phone app for casino resort giant WinStar has secured a public database that was leaking customers' personal information onto the open web.

Oklahoma-based WinStar bills itself as “the world's largest casino” by square foot. The casino and hotel resort also offers an app called My WinStar. The app allows guests to access self-service options, reward points and loyalty benefits, and casino winnings during their hotel stay.

The app was developed by a Nevada software startup called Dexiga.

The startup left one of its log databases on the internet without a password, so anyone with the public IP address can access WinStar customer data stored internally using just a web browser. Now it looks like this.

Dexiga took its database offline after TechCrunch alerted the company to the security flaw.

Three screenshots of the My WinStar app

Screenshot of the My WinStar app. Image credits: Google Play (screenshot)

Anurag SenAn honest security researcher with a knack for discovering sensitive data accidentally published on the Internet discovers a database containing personal information, but it was initially unclear who the database belonged to.

Sen said the personal data included names, phone numbers, email addresses and home addresses. Sen shared details of the exposed database with TechCrunch in an effort to identify the owner and uncover security flaws.

TechCrunch examined some of the exposed data and verified Sen's findings. According to a TechCrunch investigation, the database also included the gender of the individual and the IP address of the user's device.

The data was not encrypted, but some sensitive data, such as a person's date of birth, was redacted and replaced with asterisks.

TechCrunch investigated the exposed data and found internal user accounts and passwords associated with Dexiga founder Rajini Jayaseelan.

Dexiga's website states that its technology platform powers the My WinStar app.

To confirm the source of the suspected breach, TechCrunch downloaded and installed the My WinStar app on an Android device and signed up using a TechCrunch-managed phone number. The phone number instantly appeared in the public database, confirming that the database was linked to the My WinStar app.

TechCrunch contacted Jayaseelan and shared the IP address of the exposed database. The database became inaccessible shortly thereafter.

Jayaseelan claimed in an email that Dexiga had secured the database, but that it contained “public information” and that no sensitive data had been leaked.

Dexiga said the incident stemmed from a log migration in January. Dexiga did not provide a specific date when the database was published. The exposed database contained rolling daily logs dating back to January 26th, at the time he was secured.

Jayaseelan did not say whether Dexiga has access logs or other technical means to determine whether someone else accessed the database while it was exposed to the Internet. . Jayaseelan also did not say whether Dexiga notified WinStar of the security lapse or whether Dexiga would notify affected customers that their information had been compromised. It was not immediately clear how many people had their personal data exposed in the data breach.

In response, Dexiga said, “We will further investigate the incident, continue to monitor our IT systems, and take any necessary measures in the future.''

WinStar general manager Jack Parkinson did not respond to TechCrunch's email requesting comment.

Read more on TechCrunch:





Source link

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

French police arrest Russian basketball player accused of ransomware: Report

July 10, 2025

Authorities arrest four hackers related to UK retail hacking

July 10, 2025

Jack Dorsey says his “safe” new bitchat app hasn't been tested for security

July 9, 2025

Get the exhibition tables on TechCrunch Confuse 2025

July 9, 2025

How to protect your mobile number from SIM swap attacks

July 9, 2025

The US government has confirmed Covid research and arrests of Chinese citizens accused of stealing mass hacking email servers

July 8, 2025

Leave A Reply Cancel Reply

Top Reviews
Editors Picks

7 days left: Founders and VCs save over $300 on all stage passes

March 24, 2025

AI chip startup Furiosaai reportedly rejecting $800 million acquisition offer from Meta

March 24, 2025

20 Hottest Open Source Startups of 2024

March 22, 2025

Andrill may build a weapons factory in the UK

March 21, 2025
About Us
About Us

Welcome to Tech Brunch, your go-to destination for cutting-edge insights, news, and analysis in the fields of Artificial Intelligence (AI), Cryptocurrency, Technology, and Startups. At Tech Brunch, we are passionate about exploring the latest trends, innovations, and developments shaping the future of these dynamic industries.

Our Picks

Learn how to raise seed rounds from top VCS in 2025

July 10, 2025

Belkin will no longer support most WEMO devices and their WEMO apps

July 10, 2025

Mockly has actually created a fake DM generator that is user-friendly

July 10, 2025

Subscribe to Updates

Subscribe to our newsletter and never miss our latest news

Subscribe my Newsletter for New Posts & tips Let's stay updated!

© 2025 TechBrunch. Designed by TechBrunch.
  • Home
  • About Tech Brunch
  • Advertise with Tech Brunch
  • Contact us
  • DMCA Notice
  • Privacy Policy
  • Terms of Use

Type above and press Enter to search. Press Esc to cancel.