Nevada Station Casinos Faces Cyber Lawsuit Over March Breach

A Clark County woman has filed a federal class-action lawsuit against Station Casinos over a cyberattack the company disclosed in May 2026. Plaintiff Susan Geiner filed the complaint on May 29 in the US District Court in Nevada. She filed the complaint individually and on behalf of other affected customers. Red Rock Resorts Inc., Station Casinos' parent company, is named as the defendant. The lawsuit comes as Station Casinos prepares to celebrate its 50th anniversary with a month-long July celebration across its Southern Nevada properties.

What the Lawsuit Claims Against Station Casinos

The Las Vegas-based Freedom Law Firm and Ahdoot & Wolfson of King of Prussia, Pennsylvania, filed the complaint. The complaint argues Station Casinos should have anticipated the risk to its customer data.

The filing describes the hospitality and gaming industries as prime targets for ransomware attacks due to the large volumes of sensitive data they store, including Social Security numbers, financial information, and personal identification details.

The suit also alleges that Station Casinos' internal security systems were inadequate and failed to detect the breach as it unfolded.

The filing alleges that hackers conducted overt, noisy operations without triggering any alerts, highlighting gaps in the company's endpoint detection and response tools. Geiner seeks monetary relief, including actual and statutory damages, restitution, disgorgement, attorneys' fees, and other court-ordered remedies.

Station Casinos Delayed Disclosing the March 2026 Breach

Station Casinos confirmed the intrusion to cybersecurity outlet Cybernews one day after it notified potentially affected customers on May 21, 2026. The company offered free credit monitoring and identity theft protection to those affected. The breach occurred in March 2026 but was not publicly disclosed until May 2026. Station operates several Las Vegas properties, including Red Rock Casino Resort Spa, Green Valley Ranch Resort Spa Casino, Palace Station, Boulder Station, Sunset Station, and Durango Casino & Resort.

Las Vegas Casinos Hit by Five Cyberattacks in Three Years

The lawsuit marks another chapter in a troubling pattern for Las Vegas casino operators. Station Casinos is now the fifth major Las Vegas operator to be hit by a cyberattack in under three years. Wynn Resorts disclosed an October 2025 attack in February 2026. Boyd Gaming suffered a breach in September 2025. MGM Resorts International was crippled by a high-profile attack in September 2023. Caesars Entertainment was hacked in August 2023. The pattern underscores growing cybersecurity vulnerabilities across the industry.

This latest legal action arrives as Station Casinos marks five decades in business, with Frank Fertitta IV describing the anniversary as a celebration of guests and locals who have supported the brand for generations.