‘World’s biggest casino’ app exposed customers’ personal data

TechCrunch reported that Dexiga, the developer of the My WinStar casino app, left a logging database publicly accessible without a password, exposing unencrypted customer PII (full names, phone numbers, emails, home addresses, gender, device IPs) and an internal user account/password. The database contained rolling daily logs dating back to January 26 and was taken offline after notification; Dexiga has not confirmed whether the exposure was accessed or whether affected parties or the customer (WinStar) were notified.