
Eddie Tipton warned them.
As the head of IT at the Multi-State Lottery Association, Tipton pulled aside his boss and told him the computer software that randomly selected the winning numbers for million-dollar games in as many as 17 states had a terrible flaw.
It wasn't really random.
Though his boss listened, Tipton told state investigators that other officials with the nation's chief lottery system did not. They told him to fix it, then moved on.
A disgruntled Tipton made some updates but also stuck in a computer code that let him rig at least five jackpots in as many states worth a combined $24 million in prizes.
Even after he was caught, Tipton insisted the lottery system remained fatally flawed.
Lottery officials have assured the public that the games' problems have been resolved. But Tipton's lawyers and others aren't convinced.
And some have accused the association of trying to placate the public so people will keep playing. They cite an unreleased internal investigation as one example.
"The Multi-State Lottery Association suggests they only conducted the internal investigation because we sued them," said Gary Dickey, a Des Moines attorney. "And that should be very concerning to anybody who plays the lottery."
One of Dickey's clients, Burlington, Iowa, resident Dale Culler, is seeking a class-action lawsuit on behalf of all players cheated out of lottery wins by Tipton's manipulated drawings.
The association, commonly referenced as MUSL, is owned and operated by 36 member lotteries, mostly state organizations such as the Iowa Lottery. It operates some of the nation's most popular games, including Powerball and Lotto America — as well as the now-defunct Hot Lotto game that was the subject of Tipton's biggest conquest and failure.
Tipton was convicted of fraud and sentenced last year to as much as 25 years in prison related to rigged jackpots in Colorado, Wisconsin, Iowa, Kansas and Oklahoma.
In his confession to state authorities, Tipton said his former employer ignored multiple warnings before his scam was uncovered, including security deficiencies that he pointed out himself.
"It's definitely myself trying to say: 'Look, you guys are skating on thin ice, and you don't even know it and you're not paying attention,'" Tipton told state officials.
The lottery association's mistakes
Citing ongoing litigation, Multi-State Lottery Association officials declined to answer almost all questions related to Tipton's secret coding, which went undiscovered for years.
They also declined to outline what changes the organization has made following the discovery that its own employee had hacked the system.
Association officials did, however, respond to Tipton's statement in which he asserted some state lotteries "actually encouraged me to play their games because they wanted the revenue."
"All MUSL employees are, and have always been, prohibited from claiming prizes in games facilitated by MUSL," said Bret Toyne, the association's CEO. "In 2015, this prohibition was extended to all lottery games offered by United States lotteries, regardless of whether MUSL has any involvement in those games."
The "most obvious and basic" mistake the association made was its failure to have a separation of duties among its employees, said Gus Fritschie, an executive of SeNet International, a Virginia-based company that helped investigators reverse-engineer Tipton's code.
As director of security, Tipton was the lead programmer and had access to the Multi-State Lottery Association's systems, he noted.
Tipton's random-number software was certified by a New Jersey-based company, Gaming Laboratories International. Tipton designed his rigged coding so that it wasn't detected in the company's random tests, according to a report Fritschie helped present last year.
Gaming Labs did not return a request for comment. Its website said early this month it conducts all testing and certification for the Multi-State Lottery Association, but that statement was removed after the Des Moines Register on March 5 requested copies of its contract with the association.
Toyne said the association does not have any ongoing contractual relations with Gaming Labs.
"To give MUSL credit now, they have completely revamped their entire process," Fritschie said, "and their operational, management and technical controls are 100 times better than they were when this fraud was committed."
In 2016, the association's board president, Gary Grief, responded to questions about the Tipton scam posed by the U.S. Senate Committee on Commerce, Science and Transportation.
He assured lawmakers that all of Tipton's illegal software has been taken out of service, and his organization "continuously conducts meticulous analyses, audits and reviews" of all its games.
Des Moines attorney Nick Mauro questions how it is possible that the association was conducting rigorous monitoring during Tipton's tenure and never discovered his coding, yet now professes to have "100 times better" security processes in place.
"It doesn't add up," said Mauro, who is part of the team seeking a class-action lawsuit against the association.
Some consequences apparent
The Multi-State Lottery Association faced consequences even before Tipton was sentenced for spearheading the largest lottery scam in U.S. history.
The Iowa Lottery, for example, no longer uses the association's programs that randomly select game numbers. The Tipton scandal played a part in that decision, Iowa Lottery CEO Terry Rich said.
In addition to the possible class-action lawsuit, the association faces a lawsuit brought by Larry Dawson of Webster City, Iowa, who contends that his jackpot was smaller than it should have been as a result of Tipton's fraudulent win.
It's unknown whether any Multi-State Lottery Association employee other than Tipton has been held accountable for the scandal. Charles Strutt, the director since the association's 1987 founding, retired in 2015, just days after state investigators announced they had expanded their probe nationwide.
An organization statement said Strutt believed new leadership was necessary for it "to move forward to regain its status in the lottery industry."
Strutt did not return calls seeking comment for this story.
Internal investigation's findings
The Multi-State Lottery Association's board hired the Des Moines law firm of Dorsey & Whitney to conduct an investigation into fraud in the wake of Tipton's scheme.
An April 26, 2016, summary obtained by the Register indicates the firm was unable "to do a law-enforcement-style investigation" because it did not have subpoena or compulsory powers.
Nonetheless, Dorsey & Whitney concluded no other association employees were involved.
The summary provided to board members said the association had improved practices or procedures related to the Hot Lotto Draw in 2010 that ultimately revealed Tipton's scam, but "a public description would undermine their purpose and effect."
Jason Maher, a former computer technician for the association, said he was unexpectedly fired about four months after the Dorsey & Whitney report. He said he was given no reason, but he told prosecutors during a Nov. 30, 2016, court deposition that the Powerball drawing was moved to Florida, a blow to the Iowa staff.
"They no longer had a need for me because of the whole thing," Maher said in the deposition, which was related to Tipton's criminal charges. "We lost a lot of clients."
'Huge consequences'
The Register reached out to several state lotteries for reaction to Tipton's confessions. For example, he specifically mentioned deficiencies in California's Lottery that he said made it vulnerable.
Russell Lopez, deputy director of the California Lottery, disputed Tipton's claims, saying its procedures are sound.
Maryland Lottery dropped its membership with the Multi-State Lottery in 2016, largely a strategic decision, said its director Gordon Medenica. Maryland is part of the Mega Millions network and much of the services offered through the association weren't needed, Medenica said.
Even so, lotteries across the nation have taken note of the Tipton scandal, said Gordon Medenica, director of the Maryland Lottery, a one-time member of the Multi-State Lottery Association.
"I think it's had huge consequences," Medenica said. "... Everybody in the technical side of the business is hugely aware of where the vulnerabilities are and what we need to do to prevent any future incidences."
Timeline of the biggest crime in US lottery history
The following is a compilation of Lottery Post news coverage chronicling the Hot Lotto mystery and subsequently discovered crime.
We start the timeline with a news story indicating that only 3 months remained for the $16 million Hot Lotto jackpot to be claimed.
2011
- Deadline for claiming $16.5M Hot Lotto jackpot nears, Sep. 21, 2011
- Unclaimed Iowa lottery jackpot to expire Dec. 29, Dec. 1, 2011
- Iowa $16.5M Hot Lotto winner claims prize with two hours to spare, Dec. 29, 2011
2012
- Iowa Lottery security chief bent on determining identity of jackpot winner, Jan. 10, 2012
- NY lawyer in lottery mystery travels to Iowa this week, Jan. 17, 2012
- Iowa Lottery security chief to grill NY lawyer over Hot Lotto ticket, Jan. 17, 2012
- Representative of Hot Lotto winner named in lawsuit, Jan. 20, 2012
- Hot Lotto trust representative won't name winner, Jan. 20, 2012
- Iowa Lottery threatens to deny jackpot payout if winner stays anonymous, Jan. 23, 2012
- Lawyer gives up $14 million Iowa lottery ticket claim, Jan. 26, 2012
- $14.3 million Hot Lotto prize claim withdrawn, Jan. 27, 2012
- Iowa Legislators satisfied with Lottery's handling of mystery jackpot winner, Feb. 1, 2012
- Iowa Lottery to give away millions from jackpot mystery, Feb. 26, 2012
- Iowa Lottery director: 50-50 that Hot Lotto mystery will be solved, Aug. 9, 2012
- Iowa officials trying to solve lotto mystery, may release surveillance video, Aug. 19, 2012
2013
- 1 year later, Iowa Lottery still hunting for suspicious no-show winner, Jan. 30, 2013
- Inquiry in Iowa Lottery mystery touches Canada, Jul. 26, 2013
- Lottery jackpot probe heats up after immunity deal, Oct. 8, 2013
2014
- Iowa Lottery still hunting mystery Hot Lotto winner [video], Oct. 10, 2014
2015
- MUSL employee arrested in Hot Lotto jackpot mystery, Jan. 15, 2015
- BOMBSHELL: MUSL employee might have rigged Hot Lotto computerized drawing, Apr. 13, 2015
- Texas man charged in Iowa lottery case contests extradition, Apr. 20, 2015
- Extradition trial begins this week in $16.5M Hot Lotto fraud case, Jun. 7, 2015
- Inside the biggest lottery scam ever, Jul. 7, 2015
- Trial underway in world's biggest lottery fraud case, Jul. 14, 2015
- Lottery security chief: Rigging computerized game "sadly" possible, Jul. 15, 2015
- Prosecution rests in Hot Lotto trial, Jul. 16, 2015
- Defense quickly wraps up in Hot Lotto trial, Jul. 16, 2015
- Hot Lotto case moves to jury for deliberations, Jul. 17, 2015
- Former lottery security employee guilty of rigging $14.3M drawing, Jul. 20, 2015
- MUSL security worker who rigged drawing gets 10 years, Sep. 9, 2015
- HOT LOTTO DRAWING CHEAT CHARGED WITH RIGGING MORE JACKPOTS, Oct. 9, 2015
- Texas authorities had previously investigated brother of lottery cheat, Oct. 14, 2015
- Another $1.2M Hot Lotto jackpot rigged by Tipton, officials say, Nov. 21, 2015
- Jackpot-fixing investigation expands to more state lotteries, Dec. 18, 2015
- Prosecutors say Tipton rigged two jackpots he purchased tickets for in Kansas, Dec. 21, 2015
- Maine gives names of Hot Lotto winners to Iowa team looking into rigging scheme, Dec. 23, 2015
- S.C. Lottery assures public no computerized drawings used in state, Dec. 23, 2015
- Kansas lottery players questioning game's integrity, Dec. 23, 2015
- MUSL CHIEF OUSTED OVER JACKPOT-RIGGING SCANDAL, Dec. 23, 2015
- Lottery scandal unlikely to affect New Mexico, official says, Dec. 26, 2015
- Tipton granted delay in next trial until July, Dec. 29, 2015
2016
- Iowa Lottery CEO Terry Rich to answer lottery player questions live Monday evening, Jan. 11, 2016
- First lawsuit in state lottery-fixing scandal seeks millions, Feb. 4, 2016
- MUSL seeks to dismiss lawsuit over rigged jackpot, Apr. 1, 2016
- Lottery scammer's brother facing criminal charges, Apr. 6, 2016
- Investigators find Tipton's software code to rig computerized lottery drawings, Apr. 7, 2016
- Lottery rigging scandal prompts security audit in South Dakota, Apr. 13, 2016
- Preliminary hearing rescheduled for Tommy Tipton in lottery rigging case, Apr. 22, 2016
- Third suspect surrenders in national lottery rigging scandal, Apr. 28, 2016
- Lottery scam investigation comes to Tennessee, May 11, 2016
- Investigators find another friend of Tipton who cashed rigged lottery prize, May 11, 2016
- Convicted computerized drawing fraudster argues Iowa court appeal, Jun. 16, 2016
- US Senate panel demands info in lottery scandal, Jun. 22, 2016
- Lottery rigging trial to be moved out of Des Moines, Jun. 27, 2016
- Eddie Tipton's new trial delayed until 2017, Jul. 1, 2016
- Iowa court reverses part of Tipton's lottery fraud conviction, Jul. 28, 2016
- Internal investigation concludes Tipton acted alone to rig lottery drawings, Aug. 10, 2016
- Prosecutors say 2 more men may be linked to lottery riggings, Aug. 24, 2016
- Judge: winner's lawsuit in lottery-fixing case can continue, Oct. 13, 2016
- Alleged lottery scandal conspirator to enter new plea, Nov. 14, 2016
- Accused lottery rigger Eddie Tipton facing new Wisconsin charges, Dec. 22, 2016
2017
- Man files lawsuit over rigged lottery jackpots, Jan. 4, 2017
- Trials for Tipton brothers charged in lottery scandal delayed, Jan. 8, 2017
- Former MUSL official received severance amid lottery jackpot scandal, Jan. 10, 2017
- Texas man pleads guilty to fraud in lottery scandal case, Jan. 11, 2017
- Iowa Supreme Court hears lottery rigging case, Feb. 14, 2017
- Kansas files lawsuit against accused lottery rigger, Mar. 16, 2017
- Best friend to testify against Tipton at July lottery rigging trial, Mar. 31, 2017
- Mastermind of lottery fraud will explain how he rigged jackpots, Jun. 12, 2017
- FBI missed rigged jackpot in 2006 before lottery scheme grew, Jun. 19, 2017
- The 5 lottery jackpots Tipton and his friends stole, Jun. 20, 2017
- Lottery jackpot rigger's Iowa convictions dismissed, Jun. 23, 2017
- IT'S OFFICIAL: Tipton pleads guilty to rigging computerized lottery drawings, Jun. 29, 2017
- Lottery rigging accomplice used Wisconsin payout for offshore tax scam, Jul. 6, 2017
- Hot Lotto multi-state lottery game to end in October, Aug. 9, 2017
- Lottery rigging mastermind sentenced to 25 years in prison, Aug. 22, 2017
- Winner sues Colorado Lottery 12 years after rigged drawing, Oct. 5, 2017
2018
Todd has been saying this for years. Get rid of RNG once and for all. Maybe complex games like 5 Card Cash that seem to require RNG need to go to. My feeling is you can't win those games, the computer already knows what wagers were placed on various symbols and never picks them. Never heard of a $100K here in Kentucky.
I wish all lotteries everywhere would go back to ball drawings especially in the wake of this scandal and ongoing revelations about how Tipton did in fact manipulate the outcome with a couple of lines of coding.
This video on Lottery Post YouTube channel shows the extreme security that goes into ball drawings.
A look behind the scenes at Hoosier Lottery drawings
https://youtu.be/AA6P0wX7n0c
You'd think with the number of lotteries using computers to draw their 5 Card Cash games that they were required — but they are not. You can draw a poker-style game just fine with a traditional ball drawing.
Here is yesterday's drawing of the Ontario Lottery's Poker Lotto game:
The only games that require a computerized drawing would be a raffle game or a "Quick Draw" style Keno game, in which the drawings are held every 4 to 5 minutes. Everything else can be drawn with a ball machine, and it's the lottery's choice to use a computer.
I see that Russell Lopez claims that CA’s lottery system is “ sound”- looking at their “ integrity series” involving the lottery, it’s easy to say “ yeah, the games are safe.” But as we all know, if someone can program these infernal machines, they can be hacked. Saying they can’t be hacked or manipulated is downright arrogance.
PS: Russell is talking about the “procedure”. : l guess his talking about the 24 hour cameras focused on the RNG machine & revolving lights within. Well, thanks a lot Russell, what a relief, you have restored my faith in humanity.
Thanks Todd, didn't know about Ontario's game and non-RNG.
Don't know what got into me after knowing our Keno game is RNG and played X3 today. Not even one dollar won. It would be too much to have balls come down almost continuously for the every 4' drawings, so RNG is the only way it can be down feasibly.
What about casinos, the few that offer Keno, do they use balls or computers?
You'd have to check with the individual casino.
Software??? What software? I could have sworn lottery drawings were by random balls...so what is the computer software used for?
The discussion is about RNG games,where software is required to generate numbers. We not talking about games like Powerball or Mega Million that uses ping pong balls.
how do you know what states and what games are using RNGs? Powerball? Mega? is that posted somewhere on their websites?
Mouse over "results" at the top of the page and click on "state lottery report card".
I think I remember a big drum slowly spinning with balls in it somewhere and that is how the casino got their Keno numbers. Have never played. No doubt the few Keno spots left are probably RNG. I don't know/care!
I thought keno is “rng” in the casinos. Wasn’t there that one time when the same numbers kept coming up all day long because the seed wasn’t changed. The casinos still didn’t lose much lol.
I don't care how safe they are, the only reason that I would play the California Lottery is to prove to them that they are wrong about that.
I live in California. My family lives in Virginia. I refuse to play the lottery in California because of the random number generators. I will not even play Powerball or Mega Millions in California, partly because I refuse to buy tickets from a state that uses RNGs in any of its draw games, and partly because of the blatantly unfair payout structure of these games (lower-tier prize winners are basically robbed at gunpoint). Thus, I play the lottery only when I go home and visit my family in Virginia, because they use balls there.
Ball drawings are a lot more entertaining to watch as well. There is nothing like watching balls going up and down in a machine. When I was a teenager, I greatly enjoyed watching the D.C. lottery drawings and watching the numbered balls go up and down in the machine. Then, in 2004, they switched to a random number generator, which made me mad.