Skip to main content

Lotteries Enhance Cybersecurity Amid Evolving Threats

Share on Social

In October 2025, Norsk Tipping, Norway’s national lottery company, hosted a significant seminar in Oslo, assembling key players from the global lottery sector. The event, the 2025 Security & Operational Risk Seminar, took place from October 21–23, organized by European Lotteries and the World Lottery Association (WLA). The primary focus was on “Trust in the Supply Chain: Resilience and Oversight,” a theme that resonates deeply as the industry grapples with evolving cyber threats and intricate supplier networks.

Sofie Nystrøm, CEO of Fortified Technologies and former head of the Norwegian National Security Authority, set the stage by describing the current cybersecurity landscape. She pointed out the increasing complexity of digital supply chains and the rise in frequency and sophistication of cyber attacks, with ransomware being the most prevalent threat. Nystrøm stressed that the trust that lotteries have built with the public is under pressure, necessitating proactive measures and stronger collaborations with partners who prioritize robust security. In her words, a lottery’s defense is only as strong as its weakest supplier.

The seminar emphasized that security should not be confined to a single department but viewed as a collaborative endeavor, integral to building trust. Security teams, often operating behind the scenes, play a crucial role in sustaining public confidence in lotteries by establishing frameworks, conducting audits, and managing crises effectively. These efforts position lotteries as reliable partners within society.

Industry leaders at the seminar delved into the necessity of embedding security as a cornerstone of public trust. Gennaro Borrelli from Brightstar Lottery explored the “AI versus AI” battlefield, discussing how new technologies can both strengthen and threaten security measures. He highlighted the dual role of artificial intelligence in defending against and potentially being exploited by cyber threats.

Pablo Berloso of SELAE provided a contrasting perspective, reminding participants that the most significant risks are often traditional and tangible. He referenced Spain’s nationwide power outage in spring 2024, illustrating SELAE’s approach to managing such crises and maintaining operational resilience. His insights underscored that even the most advanced cybersecurity cannot compensate for failures in basic infrastructure.

Rebecca McCarthy of Allwyn UK shared insights from the transition from Camelot to Allwyn, which underscored resilience by integrating security into daily operations. She likened this process to a tree bending under pressure, developing stronger roots over time. McCarthy’s metaphor vividly illustrated how foundational strength can evolve from overcoming challenges.

The seminar also highlighted the importance of transparency and cooperation, with Andrew Jackson of Scientific Games reflecting on the lessons from the infamous McDonald’s promotional games fraud of the 1990s. He emphasized how transparency and teamwork are vital in preventing similar vulnerabilities.

Stavroula Karagianni of OpenBet contributed strategies for safeguarding data integrity across complex global operations. Additionally, Hans Peter Østrem, a WLA SCS Auditor, described auditors as “critical friends,” explaining that audits should transcend mere compliance. They offer opportunities for enhancing processes, fostering innovation, and bolstering resilience. His perspective reinforced the idea that audits are not merely checks but catalysts for improvement and innovation.

While the seminar acknowledged the impossibility of achieving absolute security, the closing panel concurred that maintaining trust relies on continuous vigilance and open communication. It was clear that the road to resilience is ongoing and requires perpetual adaptation to new challenges and threats.

The contrasting viewpoints presented at the seminar highlighted the multifaceted nature of cybersecurity in the lottery sector. On one hand, technological advancements offer new tools for defense; on the other, they introduce vulnerabilities that require constant oversight. The consensus among industry experts was that cultivating a culture of security, where every stakeholder plays a role, is critical to maintaining the trust and integrity of lotteries worldwide.

In summary, as cyber threats continue to evolve, the lottery sector must remain vigilant and adaptable, forging strong partnerships and fostering a culture of security. The insights shared over the three-day seminar in Oslo will undoubtedly help shape future strategies for safeguarding this vital industry.