DisclosureLens
HackingRetail & ConsumerRetailCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)Government IDMediumContained

Midwest Gaming & Entertainment, LLC

bd_26609e321a0afb25 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 2, 2023

Filed

Nov 20, 2023

To disclose

18 days

Affected

Not disclosed

Linked

8 filings

Confidence

66%
Full breach record for Midwest Gaming & Entertainment, LLC →2 incidents on file

Midwest Gaming & Entertainment, d/b/a Rivers Casino Des Plaines, experienced unauthorized access to its network on or around August 12, 2023. The incident involved the access or removal of files containing personal information of team members, customers, and online sportsbook customers. The company engaged third-party cybersecurity support and law enforcement. No evidence of financial fraud or identity theft was found. Affected individuals were offered one year of Experian IdentityWorks credit monitoring. The breach impacted residents in multiple states including Delaware, Iowa, Maryland, New York, North Carolina, Oregon, Washington D.C., New Mexico, and Rhode Island.

Incident timeline

undetected · 82 days
discovery → filing · 18 days

Aug 12, 2023

Begins

Nov 2, 2023

Discovered

Nov 20, 2023

Filed

vs. sector median

5 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 23d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
Delaware State AGNov 20 · first · this page
California State AG+2d
Massachusetts State AG+2d
Maine State AG+2d
Montana State AG+2d
New Hampshire State AG+11d
Washington State AG+14d
Oregon State AG+23d

Pattern: first filing Nov 20 (DE), last Dec 13 (OR) — a 23-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.