Bonanza Casino, a longtime Reno, Nevada gaming establishment, has notified New Hampshire regulators that a cybersecurity event compromised sensitive personal information, including Social Security numbers and driver’s license numbers. Businesses that collect and store this type of information have a legal and ethical responsibility to protect it and to promptly notify anyone whose data may have been exposed.
Bonanza Casino’s Data Breach Investigation
Bonanza Casino first became aware of suspicious activity within its network environment on February 21, 2026, when certain systems were found to be offline. Upon discovering the issue, the company immediately took steps to lock down and secure its network environment. Bonanza Casino promptly engaged third-party cybersecurity specialists to assist with its response and to conduct a comprehensive forensic investigation into the nature and scope of the incident.
Through this investigation, it was determined that an unauthorized party had gained access to certain systems within Bonanza Casino’s environment and, during that time, copied files stored on those systems. Bonanza Casino then diligently reviewed the potentially impacted files to identify and catalog the types of information present within them, as well as the individuals to whom that information related. According to a notice filed with the New Hampshire Attorney General’s Office, the company completed its review and finalized its list of individuals to notify on July 1, 2026, roughly four months after the intrusion was first detected.
Bonanza Casino has not publicly disclosed the specific method the unauthorized party used to gain access to its network, nor has it disclosed the total number of individuals affected nationwide. The New Hampshire filing addresses only the one resident of that state known to have been affected; casinos and other gaming establishments often serve customers across state lines, so additional notifications in other states are possible even though none have been publicly confirmed at this time.
Casinos and other gaming and hospitality businesses are frequent targets for cybercriminals because they routinely collect and retain large volumes of sensitive customer data, including government-issued identification and financial information, often as part of regulatory compliance and anti-money-laundering requirements. This combination of high-value data and, in some cases, legacy IT infrastructure can make the gaming industry particularly attractive to attackers seeking to exploit vulnerabilities for financial gain.
The exposure of Social Security numbers combined with driver’s license numbers is considered especially serious, since this combination of identifiers is frequently sufficient on its own to open new lines of credit, file fraudulent tax returns, or impersonate a victim with government agencies and financial institutions. Individuals affected by this type of breach are typically encouraged to monitor their credit reports and financial accounts closely for an extended period, since stolen identification data can be held by criminals and used well after the initial breach is discovered.
Bonanza Casino reported the event to the Federal Bureau of Investigation and has stated that it is implementing additional technical safeguards, enhanced security measures, and updated policies and procedures to reduce the risk of similar incidents occurring in the future. The company is also providing notified individuals with complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company, for twelve months from the date of enrollment.
When Did This Breach Occur?
Bonanza Casino states that it became aware of suspicious activity within its network environment on February 21, 2026. The company’s forensic investigation determined that an unauthorized party gained access to its systems and copied files during that time. Bonanza Casino completed its review of affected individuals on July 1, 2026, and mailed written notification letters on July 8, 2026.
What Information Was Breached?
According to the notification filed with New Hampshire regulators, the information that was potentially impacted includes an individual’s Social Security number and driver’s license number. Bonanza Casino is offering twelve months of complimentary credit monitoring and identity theft restoration services through Cyberscout to affected individuals.
What You Can Do
If you received a notification letter from Bonanza Casino, consider taking the following steps to protect yourself:
- Enroll in the complimentary credit monitoring services offered through Cyberscout in your notification letter.
- Request free copies of your credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com.
- Consider placing a fraud alert or security freeze on your credit files.
- Monitor your bank and financial statements closely for unauthorized activity.
- Report any suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against Bonanza Casino
If you were affected by the Bonanza Casino data breach, you may be entitled to compensation for the exposure of your personal information. Companies that fail to adequately protect sensitive customer data can be held accountable for the resulting harm.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
