A former Boyd Gaming employee is suing his former company, alleging that it failed to provide adequate cybersecurity.
The Las Vegas-based gaming company recently endured a cyberattack. As a result, hackers gained access to employees’ personal information. Additionally, hackers compromised the information of a “limited number of other individuals.”
According to a report from the Las Vegas Review-Journal, former Boyd employee Scott Boyd filed a lawsuit over the incident. He hopes other affected workers join the suit and it becomes a class-action effort.
The Las Vegas resident alleged Boyd failed to prevent the cyberattack that potentially exposed employees’ and customers’ personal information. The information included names and Social Security numbers.
Former Employee Says Company Wasn’t Prepared
The company documented the hack in a recent filing with the Securities and Exchange Commission. However, company officials did not offer a date or explanation regarding how the company remedied the breach.
Levy’s lawsuit alleges Boyd’s team wasn’t equipped to deal with this type of attack.
“Defendant employed ‘leading external cybersecurity experts’ and determined that ‘the unauthorized third party removed certain data from [defendant’s] IT systems, including information about employees and a limited number of other individuals,” the suit noted.
“Thus, defendant admitted that personally identifiable information was actually stolen during the data breach, confessing that the information was not just accessed, but was ‘removed’ from Boyd’s system. In other words, the data breach investigation revealed Boyd’s cyber and data security systems were completely inadequate and allowed cybercriminals to access files containing a treasure trove of its employees’ and customers’ highly private information.”
Boyd officials haven’t commented on the lawsuit. The suit accuses the company of negligence, breach of implied contract, unjust enrichment, and violated of the Nevada Consumer Fraud Act.
In the SEC filing, Boyd officials said those impacted by the attack were notified afterward. They added that the attack didn’t affect the company’s properties or business operations. Boyd owns and operates both brick-and-mortar properties and online casinos.
The news comes just days after authorities arrested a teenager in connection to the 2023 cyberattacks on MGM Resorts and Caesars Entertainment. At the time of the attack, the boy was 15 and is now 17. He recently appeared in court and the District Attorney’s office wants to prosecute him as an adult.
