Loading story…
Boyd Gaming Corporation, a major US casino and gaming operator, suffered a cyberattack that resulted in unauthorized access to its internal IT systems and the theft of employee data and information on a limited number of other individuals. The company disclosed the incident in a filing with the US Securities and Exchange Commission, stating that business operations and casino properties were not affected. Boyd Gaming is working with external cybersecurity experts and law enforcement, and is notifying impacted individuals and regulators. The company expects its cyber insurance policy to cover incident response costs and regulatory fines, and does not anticipate a material impact on its financial standing.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
Boyd Gaming reported that the incident resulted in a data breach, with reporting indicating employee information was stolen. Multiple outlets described the breach as affecting employee data rather than only causing operational disruption.
Boyd Gaming disclosed that it experienced a cyberattack impacting parts of its environment, prompting an incident response and public notification. The attack is the underlying security incident later tied to a data breach disclosure.
5 references tracked. Mallory keeps watching after this page renders.
go.theregister.com
Open sourcetherecord.media
Open sourcedatabreaches.net
Open sourcebleepingcomputer.com
Open sourceboard-cybersecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Marriott disclosed that attackers had compromised the Starwood guest reservation database, exposing records tied to hundreds of millions of guests who stayed at Starwood properties on or before Sept. 10. The company initially said the incident could affect up to 500 million guests, later revising the figure to fewer than 383 million, while stating that at least 327 million records contained personal data such as names, mailing addresses, phone numbers, email addresses, passport numbers, birth dates, gender, and in some cases encrypted payment card details. The breach prompted law-enforcement notification and regulatory scrutiny, including an investigation announced by New York's attorney general. MGM Resorts separately faced repeated fallout from cyber incidents affecting hotel guests. Guest details for 10.6 million MGM customers were later found posted on a hacking forum, and in a subsequent cyberattack the company said intruders stole customer information including Social Security numbers and passport data while disrupting reservations, casino gaming, digital room keys, websites, and mobile apps across most properties. MGM estimated the September attack would cut results by about **$100 million** and add roughly **$10 million** in response costs, with reporting attributing the intrusion to social-engineering tactics linked to **Scattered Spider** and **ALPHV/BlackCat**.
Jun 29, 2026
A cyberattack on the servers of Slovenian gambling and tourism operator **Hit** forced six casinos offline for about three days, disrupting gaming systems, loyalty services, cash registers, and hotel reception operations. The outage also led to temporary employee furloughs after the company detected the incident overnight between August 24 and 25 and shut down affected systems. Hit engaged external cybersecurity specialists, notified authorities, and began a forensic investigation alongside Slovenian police. The operator has restored enough infrastructure for a phased reopening with limited gaming capacity, but table games, bingo, and the loyalty program remain unavailable; Hit has not disclosed the intrusion vector, whether data was stolen, whether ransomware was involved, or the financial impact.
Sep 1, 2026
**Cloud Imperium Games (CIG)** disclosed that it suffered an IT incident on **January 21** described as a “systematic and sophisticated attack,” resulting in **unauthorized access to some backup systems** and **limited access to users’ personal data**. CIG stated the exposed information was limited to basic account details such as **names, usernames, contact information, and dates of birth**, and asserted that **no passwords** were impacted, **no financial/payment data** was accessible, access was **read-only**, and there was **no data modification**. The disclosure triggered backlash from users over **how and when** the company communicated the breach, with reporting highlighting that CIG initially surfaced the incident via a low-visibility website “service alert” popup rather than prominent notices or direct outreach. Coverage also emphasized that even “basic” identity and contact data can materially increase **phishing and social-engineering risk**, especially when combined with other breached datasets to build richer victim profiles.
Jun 29, 2026