HackingStolen CredentialsData ExfiltratedIDENTITY_BASICLowContained
Boyd Gaming Corporation
bd_4d481001b07bc0f1 · schema v1 · pii pii-v1
Full breach record for Boyd Gaming Corporation →Boyd Gaming Corporation notified Vermont AG of a cyber incident involving unauthorized removal of personal information (names) from its systems. The incident occurred between September 5-7, 2025. The company engaged external cybersecurity experts and federal law enforcement, terminated unauthorized access, and offered two years of complimentary credit monitoring. 16 Rhode Island residents were confirmed affected.
Vermont clock⏱ VT AG >14 bday26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_5385549096954c1eTexas State AGfiled 2025-10-02Verified
- bd_fa49a9bb13c2a59cIowa State AGfiled 2025-10-02Verified
- bd_5466f54815e13dc0Maine State AGfiled 2025-10-01(1d gap)Verified
- bd_d00c1c2465555cb6California State AGfiled 2025-10-01(1d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 9d gap
- bd_08fb36c9e929cb42New Hampshire State AGfiled 2025-10-06(4d gap)Verified
- bd_106fff4bfd61efe6Indiana State AGfiled 2025-09-24(8d gap)Verified
- bd_b508b0707b18975fMontana State AGfiled 2025-09-24(8d gap)Verified
- bd_1a7e1ea1df6ca8ffSEC 8-Kfiled 2025-09-23(9d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-02-boyd-gaming-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 2, 2025
- Raw hash
- 7ade34cac0725772f5728a7058250ae3d2fd802d2891a53beb80d93d54291b15
Reporting entity
- Name
- Boyd Gaming Corporationnorm: boyd gaming
Victim entity
- Name
- Boyd Gaming Corporationnorm: boyd gaming
Incident
- Discovered
- Sep 6, 2025
- Materiality determined
- —
- Notification sent
- Sep 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- coordination with federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.