The lottery, which runs a lottery at the University of New Hampshire, said in a statement Tuesday that it’s working with a law firm to settle the lawsuit.
The complaint, filed in the federal court in Manhattan, is asking for unspecified monetary damages and an order that the lottery and its employees protect the lottery from a lawsuit brought by the Electronic Privacy Information Center, a nonprofit privacy organization.
The lottery’s public-facing website and online form for purchasing tickets does not appear to have any privacy or security protections, according to the complaint.
The suit was filed in June by the EPP, which said the lottery violated the federal Computer Fraud and Abuse Act, the Electronic Communications Privacy Act, and New Jersey law.
The EPC claims the lottery violates the federal Electronic Communications Act by failing to properly protect users from fraudulent and offensive messages posted online.
The state lottery did not immediately respond to a request for comment.