HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Little Bonanza Inc

bd_8fba1c3116608dc0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 21, 2026

Filed

Jul 8, 2026

To disclose

20 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Little Bonanza Inc →

New Hampshire Attorney General notice regarding a cybersecurity event at Little Bonanza, Inc. DBA Bonanza Casino. The company became aware of unauthorized access and file copying on February 21, 2026. One New Hampshire resident was affected, with Social Security numbers and driver's license information exposed. The company engaged forensic specialists, notified the FBI, and provided credit monitoring services. Notification letters were mailed on July 8, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 137 days

Feb 21, 2026

Discovered

Jul 8, 2026

Filed

vs. sector median

+10 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_450c405ebd25dd6c2026-07-08Candidate

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Little Bonanza Inc
norm: little bonanza
Also named: Little Bonanza, Inc.dba oflegal entity
Bonanza Casinodba oftrade name
Industry: Retail & Consumerllm

Discovered: Feb 21, 2026
Materiality determined: —
Notification sent: Jul 8, 2026
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported event to the Federal Bureau of Investigation
Initial access: valid_credentials

During the incident: Engaged third-party cybersecurity specialists to assist with its response and to conduct a comprehensive forensic investigation
Secured and remediating its affected systems
Performed an exhaustive review of the at-risk data
Reported this event to the Federal Bureau of Investigation
Providing notified individuals with complimentary offers of credit monitoring and identity theft restoration services
Changes made: Implementing additional technical safeguards
Enhanced security measures
Updated policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJul 8 · first

New Hampshire State AGJul 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/little-bonanza-bonanza-casino-20260708.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 8, 2026
Raw hash: 48b9f9339a268a2b1beeb2390d599dee75b3bd52cd1923e10d04f0146e55cf0f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityLittle Bonanza Inc

Incidentdiscovered Feb 21, 2026

Stated responseEngaged third-party cybersecurity specialists to assist with its response and to conduct a comprehensive forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov