Bonanza Casino, a family-owned gaming and entertainment venue in Reno, Nevada, began notifying individuals in March 2026 that a cyberattack had resulted in unauthorized access to their personal information. Businesses that collect and store customer and employee data, including gaming and hospitality venues that process large volumes of personal and financial information, have a responsibility to safeguard that information against unauthorized access.
Bonanza Casino’s Data Breach Investigation
Bonanza Casino, which has operated in Reno since 1973 and offers slot and video poker machines, table games, dining, and sports betting, began notifying affected individuals on March 18, 2026 that their information had been accessed on or around March 17, 2026. The incident followed a claimed cyberattack in which a ransomware group asserted it had obtained data from the casino’s systems and threatened to publish it unless contacted. Bonanza Casino has not publicly released a full, itemized list of the specific data types involved or the exact number of individuals affected, though public reporting indicates the incident affected the personal information of a substantial number of people connected to the casino.
Casinos and other gaming and hospitality businesses are frequent targets for cybercriminals because they routinely collect a wide range of personal and financial information from patrons and employees alike, including identification details used for age verification, loyalty program records, and payment card data. Ransomware groups in particular have increasingly targeted the gaming industry, both encrypting internal systems to disrupt operations and stealing data separately to use as additional leverage in extortion attempts, a tactic known as double extortion.
When a company has not yet disclosed the precise data types compromised, affected individuals should treat any personal or financial information they have shared with that business, including names, contact information, identification numbers, and payment details, as potentially at risk. The uncertainty inherent in an incompletely disclosed breach is itself a reason for heightened vigilance, since the true scope of an incident sometimes becomes clearer only after further forensic investigation or after stolen data appears for sale or is otherwise found on the dark web.
Nevada law, like most states, requires businesses that experience a breach of certain categories of personal information to notify affected residents, and in some cases state regulators, without unreasonable delay. Individuals who receive a written notice referencing this incident should read it carefully for any details about which specific data types were involved and whether any complimentary credit monitoring or identity protection services are being offered.
When Did This Breach Occur?
According to public reporting, Bonanza Casino’s data was accessed on or around March 17, 2026, and the casino began notifying affected individuals the following day, March 18, 2026. The company has not disclosed when the intrusion was first discovered internally.
What Information Was Breached?
Bonanza Casino has not publicly released a specific, itemized list of the data types involved in this incident. Public reporting describes the breach as involving sensitive personal information, but affected individuals should refer to any notification letter they personally received for details specific to their own records.
What You Can Do
If you have visited or done business with Bonanza Casino and are concerned about this incident, consider taking the following steps:
- Review any notification letter carefully for details about what information was involved.
- Monitor your financial accounts and credit card statements for unauthorized activity.
- Place a fraud alert or credit freeze with the major credit bureaus.
- Watch for phishing emails, calls, or texts referencing this breach.
- Enroll in any free credit monitoring or identity protection services offered.
File a Data Breach Lawsuit Against Bonanza Casino
If you received a notice about the Bonanza Casino data breach, you may be entitled to compensation.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.