DisclosureLens
HackingRetail & ConsumerHospitalityRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)HighContained

CAESARS ENTERTAINMENT, INC.

bd_4875e85583699d0e · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Oct 11, 2023

To disclose

—

Affected

165,271state residents only

Linked

12 filings

Confidence

67%
Full breach record for CAESARS ENTERTAINMENT, INC. →5 incidents on file

Caesars Entertainment, Inc. disclosed a cybersecurity incident involving its loyalty program database resulting from an attack on an IT support vendor. The breach impacted customer names and other personal information. The company engaged cybersecurity firms, notified law enforcement and gaming regulators, and offered two years of identity theft protection services to affected individuals.

Hawaii clock✓ HI CRA notice due
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Oct 11, 2023

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 12 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 7d gap

Showing first 10 of 11 linked disclosures.

Filing propagation · 11 filings · 11 states

View merged incident ↗
Maine State AGOct 6 · first
Washington State AGOct 6 · first
New Hampshire State AGOct 6 · first
Delaware State AGOct 6 · first
Montana State AGOct 6 · first
Indiana State AGOct 6 · first
Massachusetts State AG+5d
California State AG+5d
Hawaii State AG+5d · this page
South Carolina State AG+6d
Oregon State AG+12d

Pattern: first filing Oct 6 (ME), last Oct 18 (OR) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.