Lawsuits Presented After Rivers Casino Philadelphia Data Breach

At least three lawsuits have been filed against Rivers Casino Philadelphia in response to a data leak.

The breach was discovered on Nov. 18 and revealed to the public on Dec. 30, 2024. Hackers were able to retrieve various forms of personal information of Rivers Casino’s customers, and according to one lawsuit, may have gained access to social security numbers and bank details.

The attack was confirmed to the public via a casino spokesperson.

Immediate fallout

Jack Horner, who spoke for Rivers Casino Philadelphia, said that an investigation into the unlawful access of the casino’s systems is underway. 

"Through the investigation, Rivers Casino Philadelphia determined that an unauthorized actor accessed and/or took certain files stored on our computer servers," Horner said.

Horner also said that the internal systems were locked down as soon as the breach was discovered, and an investigation was launched shortly thereafter.

It’s unknown how many people were victimized by the attacks. Persons who were notified of potential danger by casino officials have been told that the casino is doing its best to control the situation, though they are unable to reveal upgrades in security protocols. 

Victims of the attack have already taken a variety of legal approaches that include demands for compensatory damages and other punitive forms of repayment.

Rivers Casino Philadelphia, which sits right along the Delaware River near the heart of Fishtown, is still open for business 24 hours every day.

Going to court

One of three lawsuits filed in the wake of the revelation was classified as “class-action status” and submitted to Pennsylvania's Eastern District Court by a Radnor-based firm. 

Levi & Korskinsky, LLP, a national firm specializing in consumer protection, is also leading an investigation into the attack, per CBS News. They said that the sensitivity of information potentially revealed during the attack would leave affected individuals eligible for financial compensation.

The firm also said that these types of data leaks can lead to identity theft and fraud, and that companies who do not properly protect their customers’ data should be held liable legally.

Several casinos have been victims of online attacks in recent months. Two mainstream cases involving Caesars and BetMGM were orchestrated by Scattered Spider, an infamous ring of hackers that used social engineering tactics to gain access to company systems. 

Both cases ended in the companies spying millions of dollars in ransom to regain access to their systems.