Boyd Gaming Suffers Cyberattack, Data Breach
Posted on: September 24, 2025, 06:13h.
Last updated on: September 24, 2025, 06:13h.
- Boyd Gaming confirms cyberattack with limited personal data stolen.
- Casinos remain prime targets for hackers seeking sensitive data.
- MGM, Caesars, and Boyd highlight growing casino cybercrime threat.
Las Vegas-based Boyd Gaming Corp is the latest casino operator to fall victim to a cyberattack. The company confirmed Tuesday that hackers had broken into its internal computer systems and stolen employee information, along with data tied to “a limited number of other individuals.” The attack had not impacted its casino or hotel operations, the company added.
In a Tuesday filing with the U.S. Securities and Exchange Commission (SEC), Boyd said it had notified all those who may have been affected by the data breach and would reach out to regulators and other governmental agencies as required.
‘Swift Response’
“Upon detecting the incident, the Company promptly took steps to respond to the incident with the assistance of leading external cybersecurity experts and in cooperation with federal law enforcement authorities,” Boyd said in the filing.
The Company maintains a comprehensive cybersecurity insurance policy, which we expect will cover costs associated with incident response and forensic investigations, as well as business interruptions, legal actions and regulatory fines, if any, subject to policy limits and deductibles,” Boyd added.
The company said it believes the breach will not have a “material adverse effect on [its] financial condition or results of operations.”
Boyd operates 11 casinos in the Las Vegas Valley, including three properties in downtown Las Vegas, and has nearly a dozen other gaming locations spread across 10 states.
2023 Attacks
The disclosure comes as Las Vegas casinos have increasingly found themselves in the crosshairs of cyber criminals.
In September 2023, MGM Resorts International was hit by a sophisticated ransomware attack that disrupted slot machines, hotel check-ins, and reservations. The company later estimated losses of about $100 million. Caesars Entertainment disclosed around the same time that it paid tens of millions of dollars to hackers to restore order and protect customer data.
The attacks were believed to have been carried out by a loose connection of hackers known as “Scattered Spider.” Last week, authorities in Las Vegas announced the arrest of a teenager accused of involvement in cyberattacks on casinos during 2023. Police described it as a “sophisticated cyber crime,” though they did not name the specific targets.
Cybersecurity experts say casinos are attractive targets because they house large amounts of financial, identity, and transactional data, and the mix of gaming, hospitality, and customer loyalty programs provides multiple attack surfaces.
No comments yet