Don Laughlin's Riverside Casino settles 2024 breach for $1.5m

Don Laughlin's Riverside Resort Hotel & Casino in Laughlin, Nevada, has agreed to a class-action settlement over a July 2024 cyberattack that compromised the personal data of 51,646 customers and employees, according to Casino.org News.

The resort, owned and operated by the family of the late gaming pioneer Don Laughlin, began notifying affected individuals in September 2024 after hackers bypassed its IT security and obtained records including Social Security numbers, driver's licence details, banking information, dates of birth, addresses and insurance information.

Under the settlement terms reported by Casino.org, a minimum of $1 million is earmarked for affected individuals, with Riverside covering a further $500,000 in attorney fees, resolving the litigation without any admission of liability or wrongdoing.

Class members have until 4 January 2027 to submit a claim. Those who can document losses tied to the breach, such as identity theft, fraud, credit monitoring costs or the expense of replacing identification, may claim up to $3,000.

Claimants can also seek compensation for time spent dealing with the breach, up to three hours at $20 an hour, or a maximum of $60. A blanket claim without itemised expenses is capped at $50, rising to $75 for California residents.

All class members are entitled to a free year of CyEx Financial Shield Total, a financial fraud monitoring service that normally costs $29.95 a month.

Anyone who does not opt out or object by 4 December 2026 will be automatically included in the settlement. The notice cited by Casino.org warns that those who take no action "will not receive benefits or payments from this Settlement, and you will give up the right to sue, continue to sue, or be part of another lawsuit against the Defendants related to the legal claims resolved by this Settlement."

Murphy Law Firm's A. Brooke Murphy and Strauss Borrelli's Alex Phillips are acting as counsel for the class.

A hacking group known as Lynx claimed responsibility for the intrusion. No evidence has emerged that the stolen data was leaked or sold, and the resort has declined to confirm whether a ransom was paid.

Riverside said it "immediately engaged forensic specialists" once it learned of the attack and has since carried out what it described as an "extensive and comprehensive review" of its IT security.

The property's gaming floor spans 90,000 square feet and houses over 1,200 slot machines, roughly two dozen table games, a poker room and a sportsbook operated under the William Hill brand.