Ex-Boyd Gaming employee sues over data breach
Summary
Boyd Gaming is facing a proposed nationwide class action after a cybersecurity incident that exposed personal information of current and former employees. Former employee Scott Levy filed the lawsuit in the Nevada District Court on 25 September, alleging Boyd failed to implement adequate cybersecurity protections and delayed notifying affected individuals.
Boyd disclosed the incident in an SEC Form 8‑K on 23 September, saying an unauthorised third party accessed internal IT systems and removed data. The complaint alleges attackers obtained personally identifiable information, including names and Social Security numbers, and that the company only learned the full scope after an investigation with external cybersecurity experts.
Levy — who worked for Boyd from April 2022 to May 2024 — says he has seen a sharp increase in spam and phishing communications since the breach. The suit cites FBI warnings about ransomware actors exploiting vendor-controlled remote access to casino servers and seeks certification as a nationwide class action, bringing counts including negligence, breach of implied contract, unjust enrichment and violation of Nevada’s Consumer Fraud Act.
Key Points
- Scott Levy filed a proposed class action on 25 September against Boyd Gaming over a data breach.
- Boyd disclosed the incident in an SEC Form 8‑K on 23 September; an unauthorised party accessed and removed employee data.
- The complaint alleges exposure of personally identifiable information, including names and Social Security numbers.
- Levy claims delayed notification and inadequate security despite industry warnings about casino-targeted cyberattacks.
- The lawsuit seeks nationwide class certification and lists counts such as negligence and violation of Nevada’s Consumer Fraud Act.
Author style
Punchy: this isn’t just another breach notice. A former employee has escalated the issue to court — potential class action, precedent-setting claims and regulatory scrutiny all in play. If you care about employer data practices, incident response or legal exposure in iGaming, read the details.
Why should I read this?
Heads up — if you work in iGaming, HR, security or handle employee data, this matters. The suit alleges slow notification and weak defences after warnings about casino-targeted ransomware. It could change how operators manage breaches and vendor access. We read it so you don’t have to — short, sharp and relevant.
Source
Source: https://next.io/news/casino/ex-boyd-gaming-employee-suesscot-data-breach/