Published on: September 24, 2025, 06:13h.
Updated on: September 24, 2025, 06:13h.
- Boyd Gaming acknowledges security breach with minimal personal data compromised.
- Casinos continue to be primary targets for cybercriminals after sensitive data.
- MGM, Caesars, and Boyd underscore escalating cybercrime risks in casinos.
Boyd Gaming Corporation, headquartered in Las Vegas, has recently reported a cyber breach. On Tuesday, the organization confirmed that unauthorized individuals infiltrated their internal systems, acquiring employee data along with information from “a limited number of other individuals.” Fortunately, the attack did not disrupt casino or hotel operations, as stated by the company.
In a recent submission to the U.S. Securities and Exchange Commission (SEC), Boyd indicated that they have informed all individuals who might have been impacted by the data breach and will engage with regulators and relevant authorities as needed.
‘Rapid Response’
“Upon identification of the issue, the Company immediately initiated a response plan with the help of top external cybersecurity specialists and in collaboration with federal law enforcement,” Boyd stated in the report.
The Company has a robust cybersecurity insurance policy in place, which we anticipate will cover expenses related to incident management, forensic assessments, business disruptions, legal actions, and potential fines from regulators, depending on the policy terms and deductibles,” Boyd added.
The organization believes that the breach will not lead to any significant negative impact on their financial health or operational results.
Boyd operates a total of 11 casinos within the Las Vegas Valley, including three establishments in the downtown area, as well as several other gaming venues across 10 states.
Incidents in 2023
This revelation occurs as Las Vegas casinos find themselves increasingly targeted by cybercriminals.
In September 2023, MGM Resorts International fell victim to an intricate ransomware assault that affected slot machines, hotel check-in services, and reservations, resulting in estimated losses of roughly $100 million. Around the same time, Caesars Entertainment disclosed that it had paid hackers tens of millions to regain control and safeguard customer data.
The assaults were suspected to have been executed by a loosely connected group of hackers known as “Scattered Spider.” Recently, Las Vegas authorities arrested a teenager thought to be linked to these casino cyberattacks in 2023. Law enforcement described these incidents as “sophisticated cyber crimes,” although specific targets were not disclosed.
Experts in cybersecurity indicate that casinos represent appealing targets due to the vast amounts of financial, identity, and transactional information they manage. The combination of gaming, hospitality, and customer loyalty initiatives creates multiple avenues for potential breaches.