DisclosureLens
HackingHospitalityHospitalityCustomer Data InvolvedData ExfiltratedIdentity (basic)Financial accountFinancial credentialsLow

Midwest Gaming & Entertainment, LLC

bd_8564ee16c81511ef · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 2, 2023

Filed

Nov 22, 2023

To disclose

20 days

Affected

202scope not determined

Linked

8 filings

Confidence

63%
Full breach record for Midwest Gaming & Entertainment, LLC →2 incidents on file

Midwest Gaming & Entertainment, LLC, doing business as Rivers Casino Des Plaines, reported a data breach affecting 202 Maine residents. The incident, an external system breach (hacking), occurred between August 8 and August 12, 2023, and was discovered on November 2, 2023. The compromised information includes names and financial account or credit/debit card numbers along with their associated security codes, access codes, passwords, or PINs. Affected individuals were notified in writing on November 20, 2023, and offered credit monitoring services.

Maine clockDiscovered Nov 2, 2023 → Filed with AG Nov 22, 202320d ✓ ME AG ≤30d20 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 86 days
discovery → filing · 20 days

Aug 8, 2023

Begins

Nov 2, 2023

Discovered

Nov 22, 2023

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 21d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗
Delaware State AGNov 20 · first
California State AG+2d
Massachusetts State AG+2d
Montana State AG+2d
Maine State AG+2d · this page
New Hampshire State AG+11d
Washington State AG+14d
Oregon State AG+23d

Pattern: first filing Nov 20 (DE), last Dec 13 (OR) — a 23-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.