A California man has brought a class action lawsuit against Nevada-based Rancho Mesquite Casinos for failing “to maintain adequate data security”. 

The company operates a number of gaming venues in the United States, including Rising Stars Sports Ranch Resort in Mesquite, The Brook in New Hampshire, and the Eureka casinos in Nevada.

According to the lawsuit, the operator failed to encrypt the personal information of customers and employees leading to “the theft of personal information” of more than 200,000 people during a cyber attack in November 2022.

The hackers were able to access personal data, including the full names, driving license details and Social Security numbers of clients and employees.

However, the update on the lawsuit reveals additional sensitive data including financial account numbers and debit and credit card numbers may have been involved in the breach.

In a letter on November 9, 2022, Rancho Mesquite wrote to clients saying, “Eureka experienced a cyber security incident during which some of our systems were encrypted by an unauthorized actor. Upon discovering the incident, we immediately took steps to secure our systems, began an investigation, and a cyber security firm was engaged to assist.

“Although the investigation is ongoing, we identified certain data that the unauthorized actor accessed during the incident. We began a review of the data and identified that the data included some of your information. Specifically, the data included your name and Social Security number.”

Some customers were more affected than others in the leaks.

The plaintiff, William Houghton, seeks a redress and restitution for the harm that had been caused to him and others as a result of Eureka’s failure “to maintain adequate data security”.

The post Rancho Mesquite Served Class Action Over Casino Data Leaks appeared first on Keno Wizard.

A Southern Nevada casino is now facing a class action lawsuit for allegedly leaving its systems vulnerable and exposing the personal information of hundreds of thousands of customers and employees.

Lack of Timely Notice

Initiated by a California resident who claims his computer was part of a ransomware attack due to the casino security breach, the class action lawsuit accuses the company operating the Rising Star Sports Ranch Resort in Mesquite and The Brook in Seabrook, New Hampshire, of failing to provide the affected with timely and adequate notice, Las Vegas-based 8 News Now reported.

Rancho Mesquite Casino was the victim of a cyberattack in November 2022 during which a hacker accessed sensitive information of more than 200,000 casino customers and company employees, including their full names and social security numbers but it was in December when it sent notices to its clients about the breach.

In a letter sent to those whose personal data was exposed over the course of the several days of the hacker attack and enclosed in the court filing, the company explained that there was “a cybersecurity incident” on November 9 affecting Eureka during which parts of the casino company’s systems “were encrypted by an unauthorized actor.” Eureka Security is an Israeli-based cloud data security provider.

“Upon discovering the incident, we immediately took steps to secure our systems, began an investigation, and a cybersecurity firm was engaged to assist,” wrote the casino company to the affected parties, telling them that “although the investigation is ongoing, we identified certain data that the unauthorized actor accessed during the incident.”

“We began a review of the data and identified that the data included some of your information,” the letter concluded, pointing out that the data exposed to the hacker attack included names and social security numbers. The company also opened a dedicated phone line and offered one year of credit monitoring for those affected.

Negligence and Breach of Contract

The lawsuit accuses the casino operator of negligence, breach of contract and other counts, asking a jury to award monetary damages to the class members for the company’s failure to encrypt their sensitive information, and order the operator to strengthen its cybersecurity defenses.

“Simply put, plaintiff and class members now face substantial risk of out-of-pocket fraud losses such as loans opened in their names, medical services billed in their names, tax return fraud, utility bills opened in their names, credit card fraud, and similar identity theft,” claim the class action lawsuit documents.

The casino operator was repeatedly contacted by the reporting media with a request for comments but did not respond.

The post Class Action Lawsuit Filed against Rancho Mesquite Casino appeared first on Keno Wizard.