Boyd Gaming Corporation, a gaming company that operates in the United States and Canada, has disclosed that it recently became the victim of a data breach.
In an 8-K Filing addressed to the Securities and Exchange Commission (SEC), the Las Vegas-based gaming company says it discovered a “cybersecurity incident” in which an unauthorized party accessed its internal IT systems.
“Upon detecting the incident, the company promptly took steps to respond to the incident with the assistance of leading external cybersecurity experts and in cooperation with federal law enforcement authorities,” the company writes in the filing.
The incident had no impact on the company’s business operations. However, the threat actor responsible for the breach did acquire data stored on the company’s IT systems. This included information about employees and “a limited number of other individuals.”
As required by law, affected employees and individuals, as well as law enforcement authorities, are being informed about the incident.
According to the company, the data breach will not significantly impact its financial conditions or results. The company stresses that it has a “comprehensive cybersecurity insurance policy,” which will cover most expenses associated with the incident, including forensic investigations, business interruptions, legal actions, and, if any, regulatory fines.
A Boyd Gaming employee claims on X that the same threat actor that hacked MGM Resorts and Caesars is responsible for the current incident, which was claimed by the ALPHV/BlackCat ransomware gang back in 2023. As of writing, this hasn’t been officially acknowledged, nor claimed by the ransomware operation.
Boyd Gaming Corporation operates 11 casinos in the Las Vegas Valley and a dozen other gaming locations in ten states. It employs over 16,000 people and reported $3.9 billion in revenues in 2024.
Unlock more exclusive Cybernews content on YouTube.
Your email address will not be published. Required fields are markedmarked