Don Laughlin’s Riverside Casino settles data breach for $1.5M

Don Laughlin’s Riverside Resort Hotel & Casino in Laughlin, Nev., will set aside at least $1.5 million to compensate staff and patrons impacted by a July 2024 cyberattack. The property confirmed that personal information for more than 51,000 customers and employees was compromised. Owned and operated by the family of the late Don Laughlin, the property has agreed to settle a class-action lawsuit following a security breach that compromised sensitive data of 51,646 individuals. The resort began notifying affected parties in September 2024 that hackers bypassed IT security to fraudulently obtain employee and customer records, including Social Security numbers, driver’s licenses, banking details, dates of birth, addresses, and insurance information.

Under the terms of the settlement, Riverside will pay at least $1 million to affected individuals and $500,000 in attorney fees, resolving the class-action litigation without any admission of liability or legal wrongdoing. Members of the class have until Jan. 4, 2027, to submit a claim. Class members can claim up to $3,000 in documented expenses related to the cybersecurity incident. Class members can claim up to three hours at $20 an hour in time spent responding to the data breach, or a maximum of $60. Class members can also submit a blanket claim without itemizing expenses for $50, and California residents can claim $75. All members also receive a free year of monitoring services from CyEx Financial Shield Total, a financial fraud protection service that typically costs $29.95 a month. Members of the class who do not object or opt out of the settlement before Dec. 4, 2026, will be automatically part of the settlement.

Hacking group Lynx claimed responsibility for the Riverside data breach. There has been no confirmed leak or sale of the stolen data, and Riverside has refused to say whether it paid a ransom or bounty. Riverside said it immediately engaged forensic specialists after learning of the cyberattack and claims it has since undergone an extensive and comprehensive review of the business’s IT security.