$1.5 Million Settlement in Riverside Casino Data Breach Lawsuit

Riverside Resort Hotel & Casino in Laughlin has agreed to pay $1.5 million to settle a class action over a data breach that occurred in July 2024. The sensitive data of 51,646 people was taken in the breach. The property is owned and operated by the family of the late Don Laughlin.

Cybercriminals bypassed the company's IT security and reached the records of employees and customers. The stolen information includes Social Security numbers, driver's license numbers, financial account details, dates of birth, home addresses, and health insurance information. Riverside began notifying affected individuals in September 2024.

Under the settlement, the company will set aside at least $1 million and pay $500,000 in attorney fees. The settlement includes no admission of liability or wrongdoing. Notified members may file claims until January 4, 2027. Members who do not object or opt out by December 4, 2026 will be included in the settlement automatically.

Members may claim up to $3,000 for documented out-of-pocket expenses. These expenses include unreimbursed losses from identity theft or fraud, credit monitoring fees, and costs of obtaining new government ID documents. Members may also claim up to three hours of lost time at $20 per hour, with a maximum of $60. A flat claim of $50 is possible without documenting expenses. California residents may claim $75. All members will receive one year of free CyEx Financial Shield Total monitoring, which normally costs $29.95 per month.

The Lynx hacker group has claimed responsibility for the attack. It has not been verified that the stolen data was leaked or sold. Riverside has not disclosed whether it paid a ransom or bounty. Company executives said that they worked with digital forensics experts as soon as they became aware of the unauthorized access and carried out a comprehensive review to strengthen their IT infrastructure and security protocols.