Stake Warns Players About Data Breach

Crypto casino Stake has warned players about a data breach following a hack of the analytics service
Mixpanel via SMS phishing,
reports the Telegram channel R2B.News.

What happened

The information security incident occurred at the third-party analytics provider
Mixpanel, which Stake uses for product analytics.

According to the company, Mixpanel has no access to Stake’s infrastructure.
The breach affected only the analytics service systems and impacted several companies
using its solutions.

How the breach occurred

Mixpanel was attacked via SMS phishing (smishing), allowing attackers
to gain unauthorized access to the service’s systems.

Before the incident was contained, files containing user profile data were exported.

What data was compromised

Mixpanel confirmed the leak of the following Stake user data:

  • username
  • email address
  • date of birth
  • phone number

Passwords, payment details, and player funds were not affected.
Stake’s platform and gaming services were not subject to unauthorized access.

Actions taken by Stake and Mixpanel

Stake confirmed that its own systems were not impacted.

Mixpanel fully contained the incident, strengthened its infrastructure security, and is currently
cooperating with law enforcement authorities.

Online monitoring services are being used to detect any further spread of information related
to this incident.

Recommendations for players

Stake advises users to:

  • remain alert to phishing attempts and impersonation scams;
  • use passkeys or enable two-factor authentication;
  • exercise caution with emails or messages claiming to be from Stake.

The company emphasizes that Stake never asks for passwords or 2FA codes.

Expert commentary

According to iGaming expert STRIJ, player accounts and funds remain secure;
however, the exposure of contact details may lead to increased spam and phishing attempts.

What is Mixpanel

Mixpanel is a product analytics platform widely used in iGaming
to analyze player behavior at the event level.

The service is used to track registrations, deposits, bets, bonuses, retention, and
the player lifecycle, as well as for A/B testing interfaces and payment flows.

Previous incidents

Security incidents involving Mixpanel have been reported before.
In late November, a similar breach affected OpenAI.