Rivers Casino Philadelphia is facing a potential class action lawsuit related to a data breach in 2024 after a federal judge dismissed the operator’s motion to dismiss the case.
On August 7, Judge Joshua D. Wolson of the U.S. District Court for the Eastern District of Pennsylvania concluded that the plaintiffs sufficiently established a negligence claim against Sugarhouse HSP Gaming LP and Rush Street Gaming LLC, who are responsible for operating Rivers Casino Philadelphia.
The lawsuit claims that the companies did not provide adequate security measures for sensitive data, allegedly breaching duties under common law, contractual stipulations, industry standards, and the Federal Trade Commission Act.
This case originates from a breach that was identified around November 18, 2024, when an unauthorized party reportedly accessed and extracted files from the casino’s computer servers.
Affected individuals were notified by Rivers Casino Philadelphia around December 30, 2024, approximately six weeks post-discovery of the breach. The casino also submitted a notice to the Massachusetts Attorney General’s office.
The breached data is believed to include names, Social Security numbers, and bank details for direct deposits. Both current and former employees as well as customers are said to be impacted, although the casino has yet to specify the number of individuals affected.
This lawsuit represents one of at least three cases initiated in the Eastern District of Pennsylvania following the disclosure of the breach. An earlier case initiated by a law firm in Radnor on behalf of a Philadelphia resident aims for class-action status, compensatory damages, and additional relief. Other firms like Levi & Korsinsky and Edelson Lechtzin are also investigating the breach on behalf of potentially affected individuals.
Claimants assert that the delay in informing victims has decreased their opportunity to take precautionary measures against identity theft and fraud.
With the motion to dismiss rejected, the case will advance to the discovery phase, potentially revealing further insights into the extent of the breach and Rivers Casino Philadelphia’s data security practices.