How It Started
As a state lottery, Oregon Lottery is required to undergo biennial security reviews. Over the years, multiple vendors assessed the environment, consistently reporting strong security maturity.
In 2022, the Lottery made a deliberate decision to raise the bar. Seeking a top-tier security partner that could provide deeper insight, not just validation, the Lottery selected Sygnia to conduct its next security review.
The First Security Review: A Wake-Up Call
In 2022, Sygnia conducted a combined Cyber Posture Assessment and Red Team Exercise. Throughout the process, the team worked transparently, explaining each step, what was being observed, and why it mattered.
They uncovered issues others had missed. For the Lottery’s security leadership, the experience was eye-opening.
“Seeing what they could do… oh my gosh. I just got punched in the gut,” recalls Matt Boddinton, Supervisor Information Security at Oregon Lottery. “It was a shock—but also a realization of just how good these guys are.”
Moving to MDR: Immediate Impact
Given the strength of the initial engagement and the trust built during the assessment, Oregon Lottery chose to expand the partnership. In 2024, the organization onboarded Sygnia MDR.
The benefits were immediate.
“If something big happens, I’m calling Sygnia,” Matt says.
With Sygnia continuously monitoring the environment, the Lottery’s security team could focus on remediation and long-term improvement. Together, they worked through the findings and recommendations from the original assessment, strengthening controls and closing gaps with confidence.
18 Months Later: Measurable Improvement
In 2024, after completing the recommended improvements, Sygnia returned to conduct another Cyber Posture Assessment and Red Team Exercise.
This time, the results told a very different story.
“Since 2022, our security improved tenfold,” Matt says. “And we didn’t even know it needed to be improved that much.”
What had once been a wake-up call had become proof of progress.
Today: Confidence Through Partnership
Today, Oregon Lottery continues its partnership with Sygnia as an MDR customer and Incident Response Retainer client.
The Lottery’s internal security team of seasoned security experts remains highly capable. Even so, working with Sygnia has introduced new perspectives, advanced techniques, and continuous learning opportunities.
With Sygnia in place, the Lottery operates with confidence:
- Continuous expert monitoring of its environment
- Rapid response when suspicious activity occurs
- Immediate access to elite incident responders if a major event arises
The relationship has evolved beyond a service provider model into a true partnership.
“It’s a really good partnership,” Matt adds.
“We were able to go home after work and not lose sleep. You know you’ve got top-notch people watching your environment.”
Related Content
Detecting an Unauthorized Device in an OT Environment Before It Became a Larger Risk
Discover how Sygnia MDR helped an oil & gas organization investigate a newly detected device across its OT environment and give the security team the context needed to act.
Detecting Potentially Malicious Activity in a Legacy OT Environment
Explore how Sygnia MDR helped a semiconductor manufacturer investigate suspicious reconnaissance, privilege escalation, and persistence activity across a visibility-constrained SCADA environment.
Bybit Heist Case Study: When Billions Vanish
Discover the detailed timeline and key insights of one of the world’s
largest cryptocurrency exchanges.
By clicking Subscribe, I agree to the use of my personal data in accordance with Sygnia Privacy Policy. Sygnia will not sell, trade, lease, or rent your personal data to third parties.