Casinos Throughout New York Go Dark Following “Cybersecurity Event”

New York state’s video lottery gaming system receives management by Everi Holdings—a Las Vegas-born licensing operator; the New York State Gaming Commission (NYSGC) battled a cybersecurity event impacting casinos across the state last week. In 2020, the NY Council on Problem Gambling (NYCPG) published a report implying that 32% of residents were recreational or problem gamblers; if the report is accurate, over a million people could be at risk following the cybersecurity event. Gamblers in the region are strongly encouraged to take preventative actions in the coming weeks. 

How Did the Attack Occur? 

The cybersecurity event occurred with Everi Holdings, although local casinos felt the attack. The attack downed the NYSGC, downing the video lottery gaming systems in impacted casinos. The NYSGC originally stated the downed services were not due to an incident but has since recanted that statement. One impacted casino has caught the brunt of the locals’ attention following their 3-day service blackout: Jake’s 58 Casino. It could be that the attack disproportionately impacted Jake’s 58 or that they were unprepared for the event; nuanced details about the attack remain unknown. 

What Information Was Viewed or Stolen? 

The NYSGC has indicated there were no exposures of personally identifiable information (PII) in the attack; however, the investigation is ongoing, and given the earlier recanting of the event, it could be that more details will appear later. The NYSGC has no evidence of stolen PII. The omission of detail may indicate other issues, depending on the goal of the cybersecurity event actors. It’s impossible to say what the attack targeted or if the event had its intended outcome. One thing’s for sure: if you’re a gambler in the region, you should consider taking proactive steps to secure your accounts. 

How Did the New York State Gaming Commission Admit to the Breach? 

The attack on Everi occurred Tuesday, October 17th, 2023—it downed casino gambling systems in its wake. The NYSGC stated the event was not a cybersecurity-based issue. Between then and October 19th, most impacted casinos reopened, except for Jake’s 58. That Friday, Jake’s reopened amid the NYSGC investigation. The committee then recanted their earlier statement and confirmed it was a cyber event. If the investigation confirms that assailants stole consumer details from Everi’s video slots, impacted individuals should be notified.

What Will Become of the Stolen Information? 

It’s impossible to say what will happen due to this cybersecurity event. Although there is no evidence of consumer information being accessed or shared due to the event, gamblers in the region may still be at risk; this could mean a patron diaspora to rival casinos from those impacted, particularly for the disproportionately impacted Jake’s 58. 

What Should Affected Parties Do in the Aftermath of the Breach? 

Those who have gambled at an Everi Holdings slot in New York recently should consider protective steps. Although the investigation is ongoing, you can take steps now to guard your information actively. Hire identity monitoring services to protect your PII like name and Social Security Number; credit monitoring services to protect from stolen account numbers and financial fraud; and dark web monitoring to keep your information off the Black Market. When Everi’s investigation finishes, impacted parties will receive notification of their data with information—don’t wait to protect your future.