Bonanza Casino, a family-owned gaming and entertainment venue in Reno, Nevada, notified individuals in 2026 that a cybersecurity incident had resulted in unauthorized access to their personal information, including Social Security numbers and driver’s license numbers. Businesses that collect and store this type of information have a legal and ethical responsibility to protect it and to promptly notify anyone whose data may have been exposed.
Bonanza Casino’s Data Breach Investigation
Bonanza Casino, which has operated in Reno since 1973 and offers slot and video poker machines, table games, dining, and sports betting, first became aware of suspicious activity within its network environment on February 21, 2026, when certain systems were found to be offline. Upon discovering the issue, the company took steps to lock down and secure its network environment and engaged third-party cybersecurity specialists to assist with its response and conduct a forensic investigation.
Separately, public reporting in March 2026 described a ransomware group’s claim to have obtained data from the casino’s systems, with a threat to publish it unless contacted — a claim consistent with the timeline of the February 21 intrusion Bonanza Casino later confirmed in its official notice.
Through its investigation, Bonanza Casino determined that an unauthorized party had gained access to certain systems within its environment and, during that time, copied files stored on those systems. The company reviewed the potentially impacted files to identify and catalog the types of information present, as well as the individuals to whom that information related. According to a notice filed with the New Hampshire Attorney General’s Office, Bonanza Casino completed its review and finalized its list of individuals to notify on July 1, 2026, and mailed written notification letters on July 8, 2026 — roughly four and a half months after the intrusion was first detected.
Bonanza Casino has not publicly disclosed the specific method the unauthorized party used to gain access to its network, nor has it disclosed the total number of individuals affected nationwide. The New Hampshire filing addresses only the one resident of that state known to have been affected; casinos and other gaming establishments often serve customers across state lines, so additional notifications in other states are possible even though none have been publicly confirmed at this time.
Casinos and other gaming and hospitality businesses are frequent targets for cybercriminals because they routinely collect and retain large volumes of sensitive customer data, including government-issued identification and financial information, often as part of regulatory compliance and anti-money-laundering requirements. Ransomware groups in particular have increasingly targeted the gaming industry, both encrypting internal systems to disrupt operations and stealing data separately to use as additional leverage in extortion attempts, a tactic known as double extortion.
Bonanza Casino reported the event to the Federal Bureau of Investigation and has stated that it is implementing additional technical safeguards, enhanced security measures, and updated policies and procedures to reduce the risk of similar incidents in the future. The company is also providing notified individuals with complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company, for twelve months from the date of enrollment.
When Did This Breach Occur?
Bonanza Casino states that it became aware of suspicious activity within its network environment on February 21, 2026. The company’s forensic investigation determined that an unauthorized party gained access to its systems and copied files during that time. Bonanza Casino completed its review of affected individuals on July 1, 2026, and mailed written notification letters on July 8, 2026.
What Information Was Breached?
According to the notification filed with New Hampshire regulators, the information that was potentially impacted includes an individual’s Social Security number and driver’s license number. Bonanza Casino is offering twelve months of complimentary credit monitoring and identity theft restoration services through Cyberscout to affected individuals.
What You Can Do
If you received a notification letter from Bonanza Casino, consider taking the following steps to protect yourself:
- Enroll in the complimentary credit monitoring services offered through Cyberscout in your notification letter.
- Request free copies of your credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com.
- Consider placing a fraud alert or security freeze on your credit files.
- Monitor your bank and financial statements closely for unauthorized activity.
- Report any suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against Bonanza Casino
If you were affected by the Bonanza Casino data breach, you may be entitled to compensation for the exposure of your personal information. Companies that fail to adequately protect sensitive customer data can be held accountable for the resulting harm.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
