- Eureka Casino agrees to $1M settlement after major 2022 ransomware breach
- Hack exposed personal data of more than 229,000 customers and employees
- Victims may claim up to $5,000 for documented breach-related losses
The Eureka Casino in Mesquite, Nevada, has agreed to pay $1 million to settle a class-action lawsuit for the benefit of individuals affected by a 2022 ransomware attack on the casino’s computer network.
On Nov. 9, 2022, the casino was hit by a “massive” cyberattack lasting several days, according to the lawsuit, which names Rancho Mesquite Casino Inc., the Eureka’s operator.
The breach resulted in the theft of personal data, including full names, Social Security numbers, and driver’s license numbers belonging to 229,299 customers — and possibly employees as well, according to the complaint filed in February 2023 in U.S. District Court for the District of Nevada.
Why the Delay?
Plaintiffs accused the company of negligence and breach of contract, alleging its cybersecurity protections were inadequate and that it failed to notify customers of the breach in a timely manner.
The casino warned impacted individuals that their information had been compromised on or about December. 9, 2022, roughly a month after the incident occurred.
Cybersecurity experts say such delays can prove costly to victims of data theft, who should be notified as quickly as possible so they can change passwords, monitor financial accounts, and watch for suspicious emails or credit activity.
The lawsuit argued the breach exposed customers to potential fraud both immediately and in the future, as well as nuisance spam calls, text messages, and phishing emails.
“Simply put, plaintiff and class members now face [a] substantial risk of out-of-pocket fraud losses such as loans opened in their names, medical services billed in their names, tax return fraud, utility bills opened in their names, credit card fraud, and similar identity theft,” the complaint states.
In agreeing to the settlement, neither Rancho Mesquite Casino nor Eureka Casino admitted wrongdoing.
How Much Can Victims Claim?
Under the agreement, class members may claim reimbursement for out-of-pocket losses tied to the breach, with up to $5,000 available for documented expenses more likely than not caused by the incident. Eligible losses must have occurred between Nov. 9, 2022, and May 11, 2026, and claimants must show they made reasonable efforts to mitigate damages or obtain reimbursement.
Consumers who lived in California at any point during that period may also qualify for an additional $100 statutory payment, though that amount could be reduced if claims exceed the settlement fund.
After those payments are made, any remaining funds will be distributed to class members through a pro-rata cash payment, meaning the final amount each person receives will depend on how many valid claims are filed.
The deadline to submit a claim is May 11, 2026, while the deadline to object to or opt out of the settlement is April 9, 2026.
The post Nevada Casino to Pay $1M After Hack Exposed Data of 229,000 people appeared first on Casino.org.