HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Little Bonanza, Inc. DBA Bonanza Casino

bd_8fba1c3116608dc0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 21, 2026

Filed

Jul 8, 2026

To disclose

20 weeks

Affected

1state residents only

Confidence

67%

New Hampshire Attorney General notice regarding a cybersecurity event at Little Bonanza, Inc. DBA Bonanza Casino. The company became aware of unauthorized access and file copying on February 21, 2026. One New Hampshire resident was affected, with Social Security numbers and driver's license information exposed. The company engaged forensic specialists, notified the FBI, and provided credit monitoring services. Notification letters were mailed on July 8, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 137 days

Feb 21, 2026

Discovered

Jul 8, 2026

Filed

vs. sector median

+12 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Little Bonanza, Inc. DBA Bonanza Casino
norm: little bonanza bonanza casino
Domain: littlecaesars.com
Also named: Little Bonanza, Inc.dba oflegal entity
Bonanza Casinodba oftrade name
Industry: Retail & Consumerllm

Discovered: Feb 21, 2026
Materiality determined: —
Notification sent: Jul 8, 2026
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported event to the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Engaged third-party cybersecurity specialists to assist with its response and to conduct a comprehensive forensic investigation
Secured and remediating its affected systems
Performed an exhaustive review of the at-risk data
Reported this event to the Federal Bureau of Investigation
Providing notified individuals with complimentary offers of credit monitoring and identity theft restoration services
Changes made: Implementing additional technical safeguards
Enhanced security measures
Updated policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/little-bonanza-bonanza-casino-20260708.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 8, 2026
Raw hash: 48b9f9339a268a2b1beeb2390d599dee75b3bd52cd1923e10d04f0146e55cf0f

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityLittle Bonanza, Inc. DBA Bonanza Casino

Incidentdiscovered Feb 21, 2026

Stated responseEngaged third-party cybersecurity specialists to assist with its response and to conduct a comprehensive forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov