Riverside Resort & Casino Facing Class Action Lawsuit Over July 2024 Data Breach Affecting 55K People

New to ClassAction.org? Read our Newswire Disclaimer

Riverside Resort & Casino faces a proposed class action lawsuit over its alleged failure to secure the personal information of at least 55,150 individuals during a July 2024 data breach.

Want to stay in the loop on class actions that matter to you? Sign up for ClassAction.org’s free weekly newsletter here.

According to Riverside’s notice to affected individuals, an unauthorized third party may have accessed its computer network on July 25, 2024 and stolen files containing consumers’ names and Social Security numbers. The 37-page data breach lawsuit, however, contends that compromised information may have also included dates of birth, federal or state identification numbers, financial information, phone numbers, addresses and email addresses.

The case claims that Riverside, a resort and casino in Laughlin, Nevada, could have prevented the intrusion by properly encrypting consumers’ data or destroying the information when it was no longer needed. Instead, the complaint alleges, the defendant stored these private details unredacted in an Internet-accessible environment.

“[The plaintiffs] and the class were the foreseeable and probable victims of any inadequate security practices and procedures,” the suit says.

The filing stresses that those impacted by the breach now face a “lifetime risk” of identity theft given that their information was unlawfully accessed and could end up for sale on the dark web.

Per the case, victims remained unaware that cybercriminals had gained “unfettered” access to their sensitive data until the defendant began sending notice of the incident around September 5, 2024. The suit further alleges that Riverside’s notice letter failed to mention the specific vulnerabilities and root causes of the breach, as well as what measures, if any, the company has taken to prevent a future attack.

As the case tells it, the Riverside Resort & Casino data breach has exposed victims to serious ramifications that will persist far longer than the allegedly inadequate 12 months of complimentary credit monitoring and identity protection services the company has offered.

The Riverside Resort & Casino lawsuit looks to represent anyone in the United States and its territories whose personal information was compromised in the data breach, including all individuals who received a data breach notification letter from the company.

Check out ClassAction.org’s lawsuit list for the latest top class action lawsuits.