Cybercriminals cash out with casino giant’s employee data

Cybercriminals have reportedly stolen employee data in a breach affecting Boyd Gaming, a Las Vegas-based hotel and casino operator, with the company warning regulators that attackers may have removed certain data. According to a filing, Boyd Gaming disclosed the cyberattack to US regulators and has not confirmed when the incident occurred or who was responsible.

The firm said the compromised information included data relating to employees and a limited number of other individuals, but it did not identify who these additional individuals are or provide details about the types of data stolen. The disclosure notes that attackers breached its tech systems and removed data, while at the same time stating that it has not confirmed the scope of the breach beyond those categories.

The updates come as industry coverage references coverage by The Register, and the broader narrative remains that the company is still clarifying who was affected and what was taken, with the incident publicly discussed on 24 September 2025.