Published on: October 18, 2025, 07:05h.
Updated on: October 18, 2025, 07:15h.
The OYO Hotel & Casino Las Vegas, previously known as Hooters Hotel & Casino, encountered a major data breach in January 2025. This was disclosed in court documents initially highlighted by Crain’s New York Business on October 14, 2025. The incident reportedly affected the personal data of approximately 4,700 guests and employees.
This breach emerged amidst a legal battle between Highgate Hotels, a well-known hotel management company, and OYO Hotels, which operates properties not only in Las Vegas but also in New York and other cities. Highgate initiated a lawsuit disputing its sudden dismissal from the OYO Times Square hotel, claiming its termination on August 1, 2025, breached New York Labor Law Section 860-a, which mandates a 90-day notification for specific mass layoffs.
OYO justified its decision by highlighting “seriously deficient” IT practices attributed to Highgate, citing the Las Vegas data breach, which remained unreported in mainstream channels until the courts got involved.
However, OYO’s order was given six weeks before the official acknowledgment of the breach. According to the Maine attorney general’s office, they were only informed of the incident on September 18, 2025.
Crain’s referred to this mismatch in timelines as “unexplained.” Nevertheless, data from cybersecurity tracking suggests otherwise.
BreachSense.com, a dark web surveillance service, reported on January 14, 2025, indicating that the notorious ransomware group LockBit 3.0 was responsible for leaking the compromised data on their dark web platform.
Additionally, information released on August 15, 2025, by another cyber monitoring service, Brinztech.com, alleged that around 30 gigabytes of sensitive data had been stolen, which included:
- Personal and financial details of hotel and casino guests
- Internal financial and operational documentation
- Human resources files with sensitive employee information
- Confidential papers related to casino gaming operations and protocols
As of now, OYO has not responded to Casino.org’s request for comment.