Incident: National Lottery App Errors Impact Thousands of Players

Published Date: 2022-03-22

Postmortem Analysis
Timeline 1. The software failure incident involving the national lottery operator Camelot's mobile app occurred between November 2016 and September 2020 as mentioned in both [Article 125410] and [Article 125318]. Therefore, the estimated timeline for the incident would be between November 2016 and September 2020.
System 1. National Lottery mobile app [125410, 125318] 2. QR code scanning feature on the app [125410, 125318] 3. Payment processing system on the app [125410, 125318] 4. Marketing messaging system on the app [125410, 125318] 5. Self-exclusion and addiction identification system on the app [125410, 125318]
Responsible Organization 1. Camelot - The software failure incident on the national lottery app was caused by errors made by Camelot, the national lottery operator, as reported in Articles [125410, 125318].
Impacted Organization 1. Tens of thousands of players were impacted by the software failure incident on Camelot's mobile app, including: - Up to 20,000 users who were told their winning tickets had lost when scanning a QR code [125410, 125318]. - 22,210 players who bought single tickets but were charged for and received two tickets [125410, 125318]. - 65,400 players who were unable to buy a National Lottery product through the app due to marketing messages sent to customers who had self-excluded or showed signs of addiction [125410, 125318].
Software Causes 1. The software failure incident on the Camelot mobile app was caused by three errors: - Users being told their winning tickets had lost when scanning a QR code. - Players being charged for and receiving two tickets instead of one. - Marketing messages being sent to customers who had self-excluded or showed signs of addiction [125410, 125318].
Non-software Causes 1. Lack of proper controls and oversight in specific circumstances [125410, 125318] 2. Sending marketing messages to customers who had self-excluded or showed signs of addiction [125410, 125318] 3. Failure to comply with licence requirements leading to fines [125410, 125318] 4. Errors in ticketing and charging processes [125410, 125318] 5. Issues with the national lottery app affecting tens of thousands of players [125410, 125318]
Impacts 1. Up to 20,000 users were incorrectly informed that their winning tickets were losing tickets when they scanned a QR code on the Camelot mobile app between November 2016 and September 2020 [125410, 125318]. 2. 22,210 players purchased single tickets but were charged for and received two tickets due to a software error on the app [125410, 125318]. 3. Marketing messages were sent to 65,400 customers who had self-excluded or showed signs of addiction, preventing them from buying National Lottery products through the app [125410, 125318].
Preventions 1. Implementing thorough testing procedures: Conducting comprehensive testing, including regression testing, user acceptance testing, and security testing, could have helped identify and rectify the errors before they impacted users [125410, 125318]. 2. Enhancing quality control measures: Strengthening quality control processes within the software development lifecycle could have prevented issues such as users being charged for duplicate tickets and receiving incorrect marketing messages [125410, 125318]. 3. Improving data validation mechanisms: Implementing robust data validation checks could have prevented scenarios where users were incorrectly informed about their winning tickets or received duplicate tickets [125410, 125318]. 4. Enhancing user data management: Ensuring accurate and up-to-date user data management practices could have prevented marketing messages from being sent to customers who had self-excluded or showed signs of addiction [125410, 125318].
Fixes 1. Implement stricter quality control measures during app development and testing phases to prevent bugs and errors from affecting users [125410, 125318]. 2. Enhance the app's scanning functionality to ensure accurate ticket validation and prevent misleading information being displayed to users [125410, 125318]. 3. Improve the app's customer data management system to avoid sending marketing messages to customers who have self-excluded or shown signs of addiction [125410, 125318].
References 1. The Gambling Commission [Article 125410, Article 125318] 2. Camelot spokesperson [Article 125410] 3. Gambling Commission chief executive Andrew Rhodes [Article 125410, Article 125318]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization (a) The software failure incident has happened again at one_organization: - Camelot, the national lottery operator, faced three errors on its mobile app that affected tens of thousands of players [Article 125410]. - The incidents included issues such as users being told their winning tickets had lost, players being charged for and receiving two tickets instead of one, and marketing messages being sent to customers who had self-excluded or showed signs of addiction [Article 125410]. - Camelot accepted the outcome of the Gambling Commission's investigation regarding these historical incidents and paid the fine for the failures [Article 125410]. (b) The software failure incident has happened again at multiple_organization: - The articles do not mention similar incidents happening at other organizations or with their products and services.
Phase (Design/Operation) design, operation (a) The software failure incident related to the design phase can be seen in the case of Camelot's mobile app errors reported in the news articles [125410, 125318]. The errors on the app, such as users being told their winning tickets had lost when scanning a QR code, players being charged for and receiving two tickets instead of one, and marketing messages being sent to customers who had self-excluded or showed signs of addiction, indicate failures introduced during the system development or updates. These design flaws led to significant issues affecting tens of thousands of players. (b) The software failure incident related to the operation phase can be observed in the same Camelot's mobile app errors incident [125410, 125318]. The operation failure occurred when users were unable to buy a National Lottery product through the app despite being targeted with marketing messages. This failure was a result of the operation or misuse of the system, where customers who should not have been able to access the services were still receiving marketing messages, indicating a breakdown in operational controls or procedures.
Boundary (Internal/External) within_system (a) The software failure incident involving Camelot's mobile app was primarily within the system. The errors, such as misinforming users about winning tickets, charging for duplicate tickets, and sending marketing messages to restricted customers, all originated from within the app itself [125410, 125318]. These issues were related to the functionality and design of the app, indicating internal system failures rather than external factors.
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident involving the national lottery operator Camelot was primarily due to non-human actions. The errors on its mobile app, such as users being told their winning tickets had lost when scanned, players being charged for and receiving two tickets instead of one, and marketing messages being sent to excluded customers, were all technical issues within the app itself [125410, 125318]. (b) However, it's important to note that human actions were also involved in the sense that Camelot, as the operator, was responsible for ensuring the proper functioning of the app and compliance with regulations. The fines imposed by the Gambling Commission were a result of Camelot's failure to meet its duties and license requirements, indicating a level of human responsibility in overseeing the software's performance and adherence to guidelines [125410, 125318].
Dimension (Hardware/Software) software (a) The articles do not mention any hardware-related failures that contributed to the software failure incident. (b) The software failure incident reported in the articles was due to errors in Camelot's mobile app. The errors included issues such as users being incorrectly informed about winning tickets, being charged for and receiving duplicate tickets, and receiving marketing messages despite self-excluding or showing signs of addiction. These errors were specifically related to the functionality and performance of the software application [125410, 125318].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident involving Camelot's mobile app was non-malicious. The errors on the app, such as misinforming users about winning tickets, charging for duplicate tickets, and sending marketing messages to restricted customers, were not intentional acts to harm the system but rather resulted from operational mistakes and system flaws [125410, 125318].
Intent (Poor/Accidental Decisions) poor_decisions (a) The software failure incident involving Camelot's mobile app was primarily due to poor decisions made by the company. The errors on the app, such as wrongly informing users about winning tickets, charging for duplicate tickets, and sending marketing messages to restricted customers, were a result of specific circumstances where controls fell short of the mark [125410, 125318]. The company accepted the outcome of the investigation and acknowledged that some of their controls did not meet the required standards in certain situations. They mentioned that they always strive to operate the national lottery to the highest possible standards but admitted that their controls fell short in specific circumstances, leading to the software failure incident.
Capability (Incompetence/Accidental) development_incompetence (a) The software failure incident related to development incompetence is evident in the case of Camelot's mobile app errors reported in both Article 125410 and Article 125318. The errors on the app, such as wrongly informing users about winning tickets, charging for duplicate tickets, and sending marketing messages to restricted customers, indicate a lack of professional competence in the development and testing processes [125410, 125318]. (b) The software failure incident related to accidental factors is not explicitly mentioned in the provided articles.
Duration temporary The software failure incident reported in the articles about the National Lottery operator Camelot involved temporary failures. These failures were specific to certain circumstances and were not permanent. The errors on the mobile app, such as misinforming users about winning tickets, charging for duplicate tickets, and sending marketing messages to restricted customers, were identified and addressed by Camelot. The incidents were not ongoing or permanent issues but rather specific errors that occurred within a certain timeframe and were subsequently resolved [125410, 125318].
Behaviour omission, value, other (a) crash: The software failure incident did not involve a crash where the system loses state and does not perform any of its intended functions [125410, 125318]. (b) omission: The software failure incident involved omission where the system omitted to perform its intended functions at instances, such as users being told their winning tickets had lost when they had actually won, and customers not being able to buy National Lottery products through the app [125410, 125318]. (c) timing: The software failure incident did not involve timing issues where the system performed its intended functions correctly but too late or too early [125410, 125318]. (d) value: The software failure incident involved value issues where the system performed its intended functions incorrectly, such as users being charged for and receiving two tickets instead of one [125410, 125318]. (e) byzantine: The software failure incident did not exhibit byzantine behavior where the system behaves erroneously with inconsistent responses and interactions [125410, 125318]. (f) other: The other behavior observed in the software failure incident was the sending of marketing messages to customers who had self-excluded or showed signs of addiction, which was not intended and could be considered a violation of regulations [125410, 125318].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence property (d) property: People's material goods, money, or data was impacted due to the software failure The software failure incident involving Camelot's mobile app led to three errors that affected tens of thousands of players. These errors included users being told their winning tickets had lost when scanning a QR code, players being charged for and receiving two tickets instead of one, and marketing messages being sent to customers who had self-excluded or showed signs of addiction. As a result, players experienced financial impacts such as being incorrectly charged for duplicate tickets or not being able to purchase lottery products through the app as intended. Additionally, Camelot was fined £3.15 million for these errors, which will be given to good causes [Article 125410, Article 125318].
Domain entertainment (a) The failed system was related to the gambling industry, specifically the national lottery operated by Camelot. The software failure incidents on Camelot's mobile app affected tens of thousands of players, leading to errors such as misinforming users about winning tickets, charging for and providing duplicate tickets, and sending marketing messages to customers who had self-excluded or showed signs of addiction [Article 125410, Article 125318].

Sources

Back to List