Casinos remain prime targets for cyber attacks, with Wynn Resorts Ltd. being the latest victim.
This prestigious Las Vegas-based luxury casino and resort operator is known for its properties like Wynn Las Vegas and Encore, as well as its operations in Macau.
But the attack has captured the attention of both local and cybersecurity outlets is it is being described as a significant breach.
This cyber attack on Wynn is the latest in a series targeting major Las Vegas casino operators. Last year, Nevada's state computer systems were hit by a major ransomware attack, and Boyd Gaming suffered a cyber attack in the fall.
Another one shut down the Jackpot Junction Casino in Minnesota last spring.
Details of the Cyber Attack on Wynn Resorts
The cyberattack was orchestrated by the infamous group ShinyHunters, which has a history of involvement in various data thefts.
They claim to have stolen over 800,000 records from Wynn’s systems. This cyber attack compromised sensitive information about the company’s employees, including:
- Full names
- Emails and phone numbers
- Job positions and salaries
- Start dates and birthdays
- Social Security numbers and other personal details (in some instances)
Fortunately, there are no strong indications that guest or customer data was widely compromised.
The focus of this cyberattack appears to be internal records. The intrusion reportedly began in September 2025, when ShinyHunters exploited a vulnerability in Wynn's Oracle PeopleSoft software using stolen employee credentials. Unlike typical ransomware attacks, this breach involved data exfiltration and extortion tactics.
The Extortion and Its Fallout Following the Cyber Attack
The extortionists demanded a ransom of about $1.5 million in Bitcoin to prevent the data from being leaked after the cyberattack.
They set the deadline for February 23, 2026, threatening to release samples or the full dataset on their dark website if their demands weren't met. Wynn Resorts has not publicly confirmed the breach or shown evidence of paying the ransom.
While no widespread data leaks have been confirmed following this cyber attack, ShinyHunters has shared small proof-of-claim samples to substantiate their claims. The incident has already led to significant repercussions, including a federal class-action lawsuit filed against Wynn Resorts, accusing it of failing to adequately protect personal information during the cyberattack.
A Broader Context of Cyber Attacks in the Hospitality Industry
In 2023, MGM Resorts and Caesars Entertainment also faced major cyberattacks, with MGM incurring costs of around $100 million.
ShinyHunters is notorious for targeting organizations across sectors for data extortion, highlighting the risks for companies with valuable data assets, such as those in the hospitality and gaming industries.
For those potentially affected by this cyberattack, particularly Wynn employees, stakeholders, and their families, it’s crucial to monitor official Wynn communications and regulatory filings for updates or breach notifications. Fortunately, there are no reported major impacts on guests or the general public as of now.
Nonetheless, this incident underscores the persistent cyber threats targeting the hospitality sector, underscoring the urgent need for robust cybersecurity measures to counter them.
