HackingRetail & ConsumerHospitalityRetailStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

Riverside Resort Hotel and Casino

bd_bfb6ab5b0604d657 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 25, 2024

Filed

Sep 5, 2024

To disclose

6 weeks

Affected

19state residents only

Linked

10 filings

Confidence

66%

Full breach record for Riverside Resort Hotel and Casino →

Riverside Resort & Casino reported a cybersecurity incident discovered on July 25, 2024, where an unauthorized actor accessed network files. The incident affected 19 New Hampshire residents, involving PII such as names and government IDs. The company engaged forensic investigators, reset passwords, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d6 weeks discovery → filing

Incident timeline

discovery → filing · 6 weeks / 42 days

Jul 25, 2024

Discovered

Aug 9, 2024

Scope determined

Sep 5, 2024

Filed

vs. sector median

1 wks faster

This filing is one of 10 about the same incident.View merged incident

A leak claim by lynx about this victim predates this filing by 44 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelynxbd_53dc4ff2ca73947a2024-07-23 · +44dVerified by operator

Regulatory filings (8) · sorted by filing gap

Montana State AGbd_0026efaaec81103a2024-09-05Verified by operator
Massachusetts State AGbd_2a2a4fa6a0568d542024-09-05Verified by operator
Oregon State AGbd_497dc1019cb41fd52024-09-05Verified by operator
California State AGbd_59a69d524ee29f9b2024-09-05Verified by operator

Show 4 more filings ↓up to 2d gap

Maine State AGbd_6464deb74409d1af2024-09-05Verified by operator
Vermont State AGbd_88a88e93ec9ff00f2024-09-05Verified by operator
Washington State AGbd_b8c0f5653a6694c12024-09-05Verified by operator
Indiana State AGbd_fefb172362fa619d2024-09-03 · +2dVerified by operator

Name: Riverside Resort Hotel and Casino
norm: riverside resort hotel and casino
Domain: riversideresort.com

Name: Riverside Resort Hotel and Casino
norm: riverside resort hotel and casino
Domain: riversideresort.com
Industry: Retail & ConsumerllmHospitalityllm

Discovered: Jul 25, 2024
Materiality determined: Aug 9, 2024
Notification sent: Sep 5, 2024
Affected individuals: 19state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation
Informed its law firm
Identified the potentially affected individuals
Offered 12-24 months of complimentary credit monitoring and identity theft restoration services
Reset passwords for all accounts
Changes made: Updated policies and procedures, including the security risk management plan
Improved physical security
Implemented new technical safeguards
Enhanced data security measures
Trained workforce members
Implemented periodic technical and nontechnical evaluations
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Indiana State AGSep 3 · first

Montana State AG+2d

Massachusetts State AG+2d

Oregon State AG+2d

California State AG+2d

Maine State AG+2d

Vermont State AG+2d

Washington State AG+2d

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/riverside-resort-casino-20240905.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2024
Raw hash: 1993b7c113b2c73a56c85f6c3d93c6ee9f7f52d62e7b2a6e9ee81ed9e3202260

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityRiverside Resort Hotel and Casino

Victim entityRiverside Resort Hotel and Casino

Incidentdiscovered Jul 25, 2024

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov