DisclosureLens
FEDERALItem 7.01 · voluntary (Reg FD)HackingRetail & ConsumerRetailData ExfiltratedEmployee Data InvolvedPIIEmploymentLowActive

Boyd Gaming Corporation

bd_1a7e1ea1df6ca8ff · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Sep 23, 2025

To disclose

Affected

Not disclosed

Linked

10 filings

Confidence

67%
Full breach record for Boyd Gaming Corporation

Boyd Gaming Corporation filed an 8-K on September 23, 2025, disclosing a cybersecurity incident where an unauthorized third party accessed internal IT systems and exfiltrated employee and limited other individual data. The incident had no impact on business operations. The Company engaged external cybersecurity experts and federal law enforcement, and is notifying impacted individuals and regulators.

Incident timeline — partial

? — ?

Breach window unknown

Sep 23, 2025

Filed

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Show 5 more filingsup to 13d gap

Filing propagation · 10 filings · 9 states

View merged incident ↗

Pattern: first filing Sep 23, last Oct 6 (NH) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.