2023-11-21 Inspired Entertainment, Inc. Cybersecurity Incident

Page last updated on September 29, 2025

Inspired Entertainment, Inc. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2023-11-21 16:51:53 EST.

Incident Details

Material: No
Is Breach: Yes
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date: Unknown
Detected Date: Unknown
Disclosure Date: 2023-11-21
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Unknown
Attack Tactics¹: TA0040, TA0010
Attack Techniques¹: T1486, T1041

Costs: Not Tracked (yet)

• Incident response (Indirect): Not Tracked (yet)
• Forensics (Indirect): Not Tracked (yet)
• Legal (Indirect): Not Tracked (yet)
• Non-itemized costs (Indirect): Not Tracked (yet)

Filings

8-K filed on 2023-11-21

Inspired Entertainment, Inc. filed an 8-K at 2023-11-21 16:51:53 EST
Accession Number: 0001493152-23-042355

Item 8.01 Other Events.

On November 8, 2023, Inspired Entertainment, Inc. (the "Company") detected a ransomware attack on its information technology ("IT") systems. The attack impacted and disrupted certain of the Company's corporate IT systems but did not impact any product systems. As part of its cyber security, by design and physical separation, the product systems were separated from the corporate systems and therefore protected from attack. The Company promptly initiated previously established response protocols that included deploying containment measures involving shutting down certain internal systems as a precautionary measure. The affected IT systems have now been substantially restored to full operational capabilities.

Upon detecting and containing the incident, the Company launched an investigation and engaged the services of cybersecurity experts and advisors, incident response professionals (inclusive of a forensic vendor), and external counsel to assist the investigation and recovery. The Company has notified relevant law enforcement and regulators of the incident.

In addition to the disruption to certain of its IT systems, the Company became aware on November 15, 2023, that Company data (including in the form of personal data) had been exfiltrated. The Company continues to work diligently to investigate this cybersecurity incident, including to quantify and assess the scope of the data accessed / exfiltrated. The Company will assess all relevant legal obligations and will offer appropriate mitigations, e.g., identity / credit monitoring, where deemed necessary.

Based on information available to date, the Company does not believe the incident will have a material impact on its financial results of operations. The Company is continuing to monitor the effects of this cybersecurity incident. Since detection of the incident, the Company has implemented additional and enhanced measures to reinforce the security of its information technology systems.

The Company maintains insurance, including cybersecurity insurance, which the Company believes is commensurate with its size and the nature of its operations. However, the Company has incurred, and may incur in the future, expenses and losses related to this incident that are not covered by insurance.

Company Information