Don Laughlin’s Riverside Resort Hotel & Casino in Laughlin, Nev., will set aside at least $1.5 million to compensate staff and patrons impacted by a July 2024 cyberattack.

Owned and operated by the family of the late Don Laughlin, the property has agreed to settle a class-action lawsuit following a security breach that compromised sensitive data of 51,646 individuals. The resort began notifying affected parties in September 2024 that hackers bypassed IT security to fraudulently obtain employee and customer records, including Social Security numbers, driver’s licenses, banking details, dates of birth, addresses, and insurance information.  

Under the terms of the settlement, Riverside will pay at least $1 million to affected individuals and $500,000 in attorney fees, resolving the class-action litigation without any admission of liability or legal wrongdoing. 

Settlement Timeline

Members of the class, who received notification from Riverside of their information being compromised in the data breach, have until Jan. 4, 2027, to submit a claim.

Class members can claim up to $3,000 in documented expenses related to the cybersecurity incident. Examples of such expenses include monetary losses from identity theft and fraud, costs for credit reporting and/or monitoring, and charges to replace IDs. Class members can claim up to three hours at $20 an hour in time spent responding to the data breach, or a maximum of $60.

Class members can also submit a blanket claim without itemizing expenses for $50. California residents can claim $75. All members also receive a free year of monitoring services from CyEx Financial Shield Total, a financial fraud protection service that typically costs $29.95 a month.

Members of the class who do not object or opt out of the settlement before Dec. 4, 2026, will be “automatically part of the settlement.”

The attorneys representing the class are A. Brooke Murphy of Murphy Law Firm and Alex Phillips of Strauss Borrelli.

Group Claims Responsibility

Hacking group Lynx claimed responsibility for the Riverside data breach. There has been no confirmed leak or sale of the stolen data, and Riverside has refused to say whether it paid a ransom or bounty.

Riverside said it “immediately engaged forensic specialists” after learning of the cyberattack. The resort claims it has since undergone an “extensive and comprehensive review” of the business’s IT security.

Riverside offers 90,000 square feet of gaming with more than 1,200 slot machines, two dozen table games, a poker room, and a William Hill Race & Sportsbook.