HackingRetail & ConsumerHospitalityRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Indigo Sky Casino and Resort and Outpost Casino

bd_3643f7d7d202fd64 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 15, 2023

Filed

Jan 10, 2024

To disclose

12 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Indigo Sky Casino and Resort and Outpost Casino →

Indigo Sky Casino and Resort and Outpost Casino notified Montana residents of a data breach discovered on October 15, 2023. An unknown third party accessed documents containing names, Social Security numbers, and driver's license numbers. The company engaged forensic investigators, notified law enforcement, and offered one year of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 87 days

Oct 15, 2023

Discovered

Jan 10, 2024

Filed

vs. sector median

+5 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_1b7285a6958dbf8b2024-01-10Verified
Indiana State AGbd_6614b3bb9ff333522024-01-10Verified

Name: Indigo Sky Casino and Resort and Outpost Casino
norm: indigo sky casino and resort and outpost casino

Name: Indigo Sky Casino and Resort and Outpost Casino
norm: indigo sky casino and resort and outpost casino
Industry: Retail & ConsumerllmHospitalityllm

Discovered: Oct 15, 2023
Materiality determined: —
Notification sent: Dec 1, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: notified law enforcement
Initial access: valid_credentials

During the incident: Began an internal investigation
Took steps to secure our systems
Notified law enforcement
Engaged a forensic security firm to investigate and confirm the security of our computer systems
Changes made: Enhancing our technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(87 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGJan 10 · first

Indiana State AGJan 10 · first

Montana State AGJan 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1012.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 10, 2024
Raw hash: 2d0b99d2ec9d617fc58f5821318dd5b14d02cfc5d1f3fd8beeb1a0bd2767839a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityIndigo Sky Casino and Resort and Outpost Casino

Victim entityIndigo Sky Casino and Resort and Outpost Casino

Incidentdiscovered Oct 15, 2023

Stated responseBegan an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov