Boyd Gaming Reports Cybersecurity Incident, Casino Operations Unaffected

Boyd Gaming confirmed a cybersecurity breach on September 23 in a filing with the US Securities and Exchange Commission. The company stressed that the attack had no impact on its casinos or day-to-day operations.

Good to Know

• The incident involved internal employee records linked to a limited number of individuals.
• All 11 Boyd Gaming casinos in Las Vegas and more than 10 properties nationwide were not disrupted.
• Cybersecurity insurance is expected to cover costs tied to the incident response.

Federal law enforcement and external cybersecurity specialists are now working with Boyd Gaming as the investigation unfolds. The company has also informed regulators, government agencies, and those directly affected by the breach.

Casinos often face a higher level of risk due to the type of data and financial flows they manage. Michael Tigges, Senior Security Operations Analyst at Huntress, explained:

“Casinos present an especially attractive target – large volumes of personal data, continuous cash flow and complex IT environments make for high-value operations that demand layered defence strategies.”

Tigges also pointed out that Boyd’s fast disclosure is part of a wider industry trend toward openness when dealing with cyberattacks. He added:

“Boyd Gaming’s swift disclosure underscores a growing recognition within the gaming industry that transparency is vital when responding to sophisticated attacks. While details remain limited, the incident highlights the importance of real-time visibility across endpoints and identities.”

Insurance and Financial Stability

Boyd Gaming confirmed that its cybersecurity insurance policy is expected to cover expenses related to forensic work, legal processes, and potential fines. Importantly, the company does not anticipate any material effect on financial performance or results from operations.

The operator emphasized it “promptly took steps” to notify authorities and mitigate risks once the breach was detected.

This incident comes just a few months after Boyd Gaming finalized the sale of its remaining 5% stake in FanDuel to Flutter Entertainment for about $1.755 billion in July 2025. That deal gave Flutter full ownership of the leading US sports betting brand, placing FanDuel’s implied valuation at $31 billion.

For Boyd, the sale reinforced its financial standing, while the current cyberattack reminds the industry that operational resilience and security remain ongoing priorities.

Tigges concluded:

“This breach serves as a reminder that continuous monitoring and rapid incident response are no longer optional but central to safeguarding both employee data and brand trust.”

The post Boyd Gaming Reports Cybersecurity Incident, Casino Operations Unaffected appeared first on iGaming.org.