Don Laughlin’s Riverside Casino Settles Data Breach for $1.5M

Don Laughlin’s Riverside Resort Hotel & Casino in Laughlin, Nev., will pay $1.5 million to settle a class action lawsuit filed over a July 2024 data breach impacting employee and customer records.

Owned and operated by the family of the late Don Laughlin, the property has agreed to settle a class-action lawsuit following a security breach that compromised sensitive data of 51,646 individuals.

The resort began notifying affected parties in September 2024 that cybercriminals had bypassed IT security to obtain employee and patron records—including Social Security numbers, driver’s license numbers, financial account details, dates of birth, home addresses, and health insurance information.

Under the terms of the agreement, Riverside will set aside at least $1 million to compensate affected individuals and pay $500,000 in attorney fees, resolving the class-action litigation without any admission of liability or legal wrongdoing.

Settlement Timeline & Compensation Terms

Members of the class who received official notification from Riverside regarding the breach have until Jan. 4, 2027, to submit a claim for compensation.

Class members can claim up to $3,000 for documented out-of-pocket expenses resulting from the incident. Qualifying expenses include unreimbursed financial losses from identity theft or fraud, credit monitoring fees, and charges for replacement government IDs. Class members may also claim up to three hours of lost time spent addressing the breach at $20 per hour, capped at $60.

Class members can also submit a blanket claim without itemizing expenses for $50. California residents can claim $75. All members also receive a free year of monitoring services from CyEx Financial Shield Total, a financial fraud protection service that typically costs $29.95 a month.

Members of the class who do not object or opt out of the settlement before Dec. 4, 2026, will be “automatically part of the settlement.”

The attorneys representing the class are A. Brooke Murphy of Murphy Law Firm and Alex Phillips of Strauss Borrelli.

Extortion Group Claims Responsibility

Hacking group Lynx claimed responsibility for the Riverside data breach. There has been no confirmed leak or sale of the stolen data, and Riverside has refused to say whether it paid a ransom or bounty.

Riverside executives stated the company “immediately engaged forensic specialists” upon discovering the unauthorized access and has since completed an “extensive and comprehensive review” to strengthen its IT infrastructure and security protocols.

Located along the Colorado River, Riverside Resort features 90,000 square feet of casino space housing more than 1,200 slot machines, two dozen table games, a poker room, and a William Hill Race & Sportsbook.