A large amount of personal data about UB players has been leaked. The data, which was posted publicly on the internet, appears to contain information about every player with an account at Ultimate Bet. Subject: Poker estimates that roughly 3.5 million accounts are affected. Accounts on UB’s sister site, Absolute Poker, are not included.
The leaked data includes the following:
- Full name
- Screen name
- E-mail address
- Phone number
- Mailing address
- Account balance
- IP address
- Deposit methods used (e.g. “echeck”)
- Birth date
- Account number (unique identifier for UB accounts, not bank accounts numbers)
- VIP status
- Affiliate status
- Blacklist status
A link to the data was posted on the Two Plus Two Poker Forums by an anonymous poster who removed the link eight minutes later. This is the only such public posting that we know of, but in that brief time period, enough people saw the link that it is currently being passed around privately.
Subject: Poker confirmed the accuracy of the data against known information. For example, the author’s private information is included and correct (though it is now outdated). We looked up a small number of known accounts, and we were unable to find anyone with a UB account whose personal details were not leaked accurately. It is of course possible that some subset has been removed or altered.
The data is organized by country, with roughly 2 million US accounts, 319,000 Canadian accounts, 137,000 UK accounts, and roughly 1 million accounts from other countries. The data contains over a dozen columns in addition to those listed above, many of which we’ve been unable to identify. Indeed, all the columns are unlabeled, and many are inconsistent. In one spreadsheet, a column that contains IP addresses for some users contains physical addresses for others; in another, a column that contains screen names for some contains account numbers for others.
Read more
Update 12/3/2011 5:00 PM EST:
The host of the site has responded to our request and disconnected the server which contained the leaked information. It is unclear how many people had access to the data before it was taken down and how much of it was downloaded.
Out of an abundance of caution, Subject: Poker will not reveal the former location of the information at this time, and we suggest that others do the same. We will continue to look into who posted this information and why, and we will cooperate with law enforcement if we are contacted.
