You've seen enough Hollywood blockbusters about casino heists to know that gambling institutions are constantly in the crosshairs of attackers—online and off. In the digital realm, however, better malware tools and access to deep funding make today's cyber criminals more than a bad movie, especially when lucrative payloads are for the taking.

The Hard Rock Casino has been hit by a series of casino breaches, marking a worrisome trend among data breach victims: most targets have suffered one or more similar compromises in the recent past. This pattern of repeated breaches is especially true of retailers and banks, and increasingly—casinos and gaming enterprises.

In May 2015, attackers were able to steal cardholder names, credit card numbers, and CVV codes belonging to hotel guests and customers. In 2016 they suffered similar incidents due to malware being installed on POS systems, allowing attackers to steal customers' credit card information.

Casino regulators are government organizations, focused on monitoring and maintaining levels of safety and security at online gambling websites. A couple of the best-regarded regulators are the UK. Online gambling winnings are considered taxable income at the same rate as other gambling winnings. For online gambling winnings, the payer is required to send Form W2G only if the winner reaches the. A number of online gambling sites are known to triple first time deposits up to a certain amount; this is a tactic designed to tempt players.These virtual casinos cannot do much to prevent problem gamblers. Investigating Online Casino Security The majority of online casinos are safe, secure and trustworthy. In the era before live casinos were regulated, players often had to worry about the fairness of.

Investigators hired by the casino discovered unauthorized POS network access and the presence of malware, leading to this statement issued on June 27, 2016 regarding the second data breach due to malware. However, this time the attack was more widespread than the year before, targeting the resort itself—as opposed to restaurants and retail locations within the hotel. And like other recent attacks, PoS scraping malware was used to steal customer data as it entered the resort’s payment card system.

In 2017 still more customer data was exposed through a far-reaching breach of the Sabre booking system. While Hard Rock itself was not at fault, they still bore the effects of having their name associated with yet another loss of confidentiality regarding customer data. Eleven hotels were affected.

It may come as no surprise that casinos and gaming firms are ideal cyber attack targets, but how competent are these enterprises when it comes to rudimentary security? Given the volume of privileged financial data collected, you'd expect to see corresponding security measures in place. Let's take a look at some of the top casino/resorts and see if this is the case.

Bellagio: 751

The Italian-themed Las Vegas hotel/resort and casino scores a solid 751 CSTAR rating. Apparently its fortress-like facade is more than just looks—but a few gaps such as lack of HTTP Strict Transport Security and DNSSEC make for a less-than-optimal security posture.

Caesars Palace: 504

Arguably Las Vegas' most well-known hotel/resort, Caesars Palace—despite its towering facade—has left its digital fortress poorly protected. Lack of DNSSEC and server data leakage are a few of its security shortcomings, along with a 53% CEO approval rating, which increases the risk of internal attack.

The Venetian: 561

This five-diamond luxury hotel/casino may not be the only Italian-themed megaresort on the Las Vegas Strip, but unlike its counterpart the Bellagio, the Venetian lacks various website perimeter security controls—sitewide SSL, DMARC, and DNSSEC, to name a few.

Are Online Casinos More Resilient?

Brick-and-mortar gambling establishments are one thing, but what about online casinos born in the cloud? You wouldn't be be blamed for assuming thats casinos are essentially the world's largest banking operations. But unlike banks, casinos resorts are faced with a myriad of risks introduced by on-site retail establishments, service operations, and countless public-facing ATMs and card readers. The Hard Rock Casino may have fallen victim to sophisticated malware and PoS scraping technologies, but if recent history is any indication, proper patching and vulnerability detection could have saved them from a repeat compromise. This is what UpGuard's resilience platform provides: validation that your systems are free from security flaws, vulnerabilities, and misconfigurations that could lead to data breaches and outages.

After the thrill of collecting gambling winnings, comes questions about taxes.

Yes, gambling income, which includes winnings from slots, table games, horse racing, sports betting, lottery games, jackpots, and the like, is considered taxable income. As such, you are required to report them on your tax return. The car, boat, or Harley Davidson and other noncash prizes also need to be reported.

There are plenty of questions surrounding Pennsylvania taxes and gambling winnings. Now there are even more with the advent of sports betting, betting apps, and online casinos in Pennsylvania.

Here are some answers.

How much are my gambling winnings taxed?

Casinos withhold 25% of winnings for those who provide a Social Security number. If you do not provide your Social Security number, the payer may withhold 28%.

Currently, Pennsylvania’s personal income tax is a flat tax rate of 3.07% which applies to all taxable income, including gambling and lottery winnings. PA has the lowest rate of all states with a flat tax.

The new regular withholding rate

Effective for taxable years beginning after December 31, 2017, the withholding rate under Section 3402(q) applicable to winnings of $5,000 or more from sweepstakes, wagering pools, certain parimutuel pools, jai alai, and lotteries (formerly 25%) is 24%.

Federal Form W-2G, Certain Gambling Winnings

The organization that pays the winnings, in most cases, the casino, is responsible for sending the recipient of the winnings Form W-2G, Certain Gambling Winnings.

Form W-2G reports the amount of winnings to you as well as to the IRS.

The payer is required to send Form W2G only if the winner reaches the following thresholds:

• The winnings (not reduced by the wager) are $1,200 or more from a bingo game or slot machine
• The winnings (reduced by the wager) are $1,500 or more from a keno game
• The winnings (reduced by the wager or buy-in) are more than $5,000 from a poker tournament
• The winnings (except winnings from bingo, slot machines, keno, and poker tournaments), reduced by the wager, are:
  • $600 or more, and
  • At least 300 times the amount of the wager
• The winnings are subject to federal income tax withholding (either regular gambling withholding or backup withholding)

How to report PA gambling winnings on taxes

According to the IRS, you must report the full amount of your gambling winnings each year on your federal taxes. First, you report gambling winnings as

You may receive a Form W-2G showing the amount of your gambling winnings and any tax withheld. Include the amount from box 1 as “Other Income” on Form 1040, Schedule 1 (PDF).

Online Gambling Casinos

That number then goes on your U.S. Individual Income Tax ReturnForm 1040 (PDF), line 7a (designated “Other Income”). You should attach the Schedule 1 form to your Form 1040.

Include the amount shown in box 2 on the W-2G on line 17 (designated as federal income tax withheld) of your Income Tax Return (Form 1040).

Pennsylvania state taxes for gambling

In addition to federal taxes payable to the IRS, Pennsylvania levies a 3.07% tax on gambling income.

You should report your Pennsylvania taxable winnings on PA-40 Schedule T (PDF). Include the total winnings from line 6 of Schedule T on your Pennsylvania Income Tax ReturnPA-40 (PDF), line 8 (“Gambling and Lottery Winnings”).

If your gambling winnings come during a trip to another state or country, you are still required to report.

Michelle Malloy, Esq. at AUA Capital Management, LLC in Conshohocken, Pennsylvania, commented:

“Pennsylvania takes the position that they are entitled to tax a portion of your worldwide income based on certain income items (wages, interests, dividends, capital gains, gambling winnings, lottery winnings, etc).”

What if I don’t receive a Form W2-G?

If you did not receive Form W-2G, your winnings are still considered taxable income and should be reported. A payer is required to issue you a Form W-2G if you receive certain gambling winnings or have any gambling winnings subject to federal income tax withholding.

According to Malloy:

“You are required to report all gambling winnings for federal and Pennsylvania taxes. If you hit a certain threshold they (the casino) will withhold money. In the instance where a casino doesn’t do their job and and fails to send you a W2-G you are still required to report your winnings, or you run the risk of underreporting your taxable income for the year.”

Do I have to pay taxes if a group of people win the lottery?

What happens when a group of coworkers chip in on a lottery ticket that wins? What about you and a friend who put money on a long-shot team to win the championship?

Meet Form 5754 (PDF). Payers use this form to prepare Form W-2G when the person receiving gambling winnings subject to reporting or withholding is not the actual winner or is a member of a group of two or more people sharing the winnings.

Don’t send Form 5754 to the IRS. Keep a copy for your records and return the form to the payer (usually the casino) for preparation of Form W-2G for each person listed as winners.

Are there any deductions available for taxes related to gambling?

Gambling losses can be deducted. However, they must be itemized on line 28 of Schedule A, Form 1040.

Also, you cannot deduct more than your winnings.

Expenses related to any gambling or lottery activities, (like your dinner at the steakhouse, celebratory drinks from the bar, or cost of hotel room) cannot be deducted.

If you are going to deduct gambling losses, keep these records:

• The date and type of each wager
• The name and location of the bet
• The amount won or lost
• Wagering tickets
• Canceled checks
• Credit card records

When using a players club/members card, casinos can track players’ spend. Therefore, you can request a win/loss report that will give you a fairly good sense of your activity in a casino. Online casino players can request the same report and most sites should be able to provide it without issue.

“A lot of people may under-report,” explained Malloy. “They might win $10,000 but have $3,000 of expenses so they think they are just going to report $7,000. That can be an issue, as Pennsylvania does not allow a deduction for expenses. If you win a lot of money in June, for example, you might want to make an estimated tax payment [due Sept. 15 and Jan. 15] so you don’t have an underpayment penalty the following April.”

How to claim gambling winnings and/or losses

Pennsylvania provides a helpful resource to determine how to claim gambling winnings and/or losses.

There is a prompt where you can start a ten-minute interview.

Be sure to have the following information ready:

• Your and your spouse’s filing status
• Amount of your gambling winnings and losses
• Any information provided to you on a Form W-2G

Taxes on multistate lotteries

The Pennsylvania Department of Revenue considers multi-state lottery prizes, like those from Powerball and Mega Millions, awarded on tickets purchased through a licensed Pennsylvania state lottery ticket vendor, a prize by the Pennsylvania Lottery.

“Such prizes are considered Pennsylvania source income and both residents and nonresidents are subject to tax on such income if the prize is a cash prize. Multistate lottery prizes awarded on tickets purchased through a vendor in another state lottery are considered prizes awarded by that state lottery. Such prizes are not considered Pennsylvania source income and only residents are taxed on such income regardless of whether the prize is a cash or noncash prize.”

Due to a 2016 law change, any cash prize won from a Powerball of Mega Millions ticket in any state is taxable for state purposes, in addition to federal taxes.

What happens if you win a few thousand dollars on a winning PA lottery ticket?

Lottery winnings are included in taxable income. Pennsylvania Lottery winners of an individual prize valued at more than $600 will receive a Form W2-G by mail.

If your spouse also wins, they must report their winnings separately.

“For a significant windfall, like over $5 million, it definitely makes sense to talk to an attorney or accountant to determine if they should take a lump sum payout or annuity. They may also need to think about estate tax planning, financial planning and/or asset protection planning for their windfall,” said Malloy.

Sports betting winnings and taxes

Sports betting winnings are taxable income.

The IRS states:

“Gambling winnings are fully taxable and you must report the income on your tax return. Gambling income includes but isn’t limited to winnings from lotteries, raffles, horse races, and casinos. It includes cash winnings and the fair market value of prizes, such as cars and trips.”

Even though sports betting isn’t specifically listed, it falls under the umbrella of “gambling winnings.”

Wherever your sports betting win occurred – at the OTB, the casino, on a sports betting app – they payer should send Form W-2G.

Sports betting losses might also be used as deductions if you itemize your deductions and keep a detailed record of wins and losses.

Based on your tax bracket, sports bettors in Pennsylvania could owe up to 35 % of winnings to the federal government in addition to the 3.07 % Pennsylvania taxes net gambling winnings.

Online gambling and taxes

Online Casino Security

Sports betting apps and online casinos provide unmatched convenience. You may also enjoy the anonymity of playing behind a screen name instead of in person. However, it still comes with the same tax responsibilities. Online gambling winnings are considered taxable income at the same rate as other gambling winnings.

Online Gambling Security Concerns

For online gambling winnings, the payer is required to send Form W2G only if the winner reaches the following thresholds:

• The winnings (not reduced by the wager) are $1,200 or more from a bingo game or slot machine
• The winnings (reduced by the wager) are $1,500 or more from a keno game
• The winnings (reduced by the wager or buy-in) are more than $5,000 from a poker tournament
• The winnings (except winnings from bingo, slot machines, keno, and poker tournaments), reduced by the wager, are:
  • $600 or more, and
  • At least 300 times the amount of the wager
• The winnings are subject to federal income tax withholding (either regular gambling withholding or backup withholding)

How To Gamble Online Legally

In terms of deductions for taxes, players can request a report from online casinos detailing wins and losses.