Eureka Casino Settles Data Breach Class-Action Lawsuit for $1M

The Eureka Casino in Mesquite, Nevada, has agreed to settle a class-action lawsuit, paying out $1 million as part of the proceedings, and turning the page on a cybersecurity incident that has rankled four years after the fact.

Claimants Argue They Were Not Notified on Time

With a total of 229,000 customers and employees affected, hackers were able to steal personal information of the victims, resulting in a pending payment to each to the tune of $5,000 maximum amount to each victim before pro-rata distribution of any unclaimed amount.

The data breached included full names, Social Security numbers, driver’s license numbers, and more. The casino was accused of failing to notify the victims promptly, taking about a month to alert those affected, which could have a serious impact on personal lives. 

Security experts argue that following such breaches, people should change passwords, check their financial accounts, and watch out for suspicious credit activity or emails. 

“Simply put, plaintiff and class members now face substantial risk of out-of-pocket fraud losses such as loans opened in their names, medical services billed in their names, tax return fraud, utility bills opened in their names, credit card fraud, and similar identity theft,” the complaint further explained. 

However, claiming up to $5,000 in settlement payment would require proof on the part of the claimants, i.e., that the incident had indeed, more likely than not, caused them expenses. 

This does not mean that the casino may withhold money. Instead, any remaining money will be distributed to the class members on a pro-rata basis. Documents for a settlement payment may be submitted by May 11, 2026.

This is not the first instance of a casino being targeted by cyber criminals. In fact, Wynn Resorts was recently hit with a data breach, and rumors of a new cyber threat at Caesars Entertainment are spreading fast on social media.

Many are drawing parallels to 2023, when the company was asked to pay $30 million after hackers breached its defense systems and threatened to reveal confidential data to the public.