Wynn Resorts sued in class action over large data breach

Wynn Resorts Limited, a major US casino operator, is currently facing a federal class-action lawsuit due to a significant data breach in 2025, which the hacking group ShinyHunters has claimed responsibility for. The lawsuit, filed in Nevada on Feb. 21, accuses Wynn of mishandling customers’ sensitive personal information, leading to the breach in September of that year.

The legal action stems from a public announcement by ShinyHunters on Feb. 20, revealing the theft of more than 800,000 customer records from Wynn Resorts. The data reportedly includes social security numbers and other personal details, putting those affected at risk of identity theft for an extended period. The cyber-criminals gave Wynn a deadline of Feb. 23 to respond to their demands, threatening to leak the stolen information if left unanswered.

Numerous cybersecurity experts have linked ShinyHunters to a string of recent high-profile data breaches, suggesting a pattern of malicious activity. The lawsuit brought against Wynn argues that the casino operator is legally obligated to safeguard customers’ private information from unauthorized access and intrusion. By failing to adequately protect this sensitive data, Wynn exposed affected individuals to ongoing risks of identity theft and fraud.

The complaint specifically highlights Wynn’s alleged negligence in failing to encrypt or redact the compromised information, rendering it vulnerable to exploitation by hackers. This lapse in security measures has created a lasting threat to the affected parties, who may continue to face consequences for the breach for their lifetimes. The plaintiff maintains that Wynn’s response following the breach was insufficient, as the company’s notification letter omitted crucial details about the incident and measures taken to prevent future breaches.

According to the lawsuit, Wynn’s offer of 24 months of identity monitoring services to affected customers falls short of addressing the long-term consequences of the data breach. The plaintiff argues that victims of data breaches often confront multiple years of identity theft and financial fraud, requiring ongoing protection and compensation beyond the initial monitoring period provided by the company. In light of these shortcomings, the legal action seeks class certification and additional remedies to address the inadequacies of Wynn’s response to the data breach.

Overall, the federal class-action lawsuit against Wynn Resorts underscores the importance of safeguarding sensitive personal data in the face of evolving cyber threats. The legal proceedings serve as a reminder of the responsibilities that companies bear in protecting customer information and addressing the long-term repercussions of data breaches on affected individuals.