HackingOtherData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Taos Mountain Casino

bd_e05c3a955d14eb1d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 28, 2026

Filed

Jun 9, 2026

To disclose

—

Affected

3state residents only

Linked

4 filings

Confidence

67%

Full breach record for Taos Mountain Casino →

Taos Mountain Casino reported a cybersecurity incident discovered on March 28, 2026, involving unauthorized access to computer systems. The breach affected 3 Nebraska residents, exposing names, addresses, and Social Security numbers. TMC disconnected network access, engaged forensic investigators, reset credentials, and offered 12 months of credit monitoring via Kroll. Notifications were mailed on June 9, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 28, 2026

Discovered

Jun 9, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitedragonforcebd_7ec765994fcb514e2026-05-30 · +10dVerified by operator

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_adc976b51a6097ea2026-06-09Verified
New Hampshire State AGbd_b968fda3522c06d92026-06-08 · +1dVerified by operator

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Taos Mountain Casino
norm: taos mountain casino
Domain: taosmountaincasino.com
Industry: Otherllm

Discovered: Mar 28, 2026
Materiality determined: —
Notification sent: Jun 9, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: Notified Nebraska Attorney General's Office

During the incident: Disconnected all access to the network
Engaged a specialized third-party cybersecurity firm to assist with securing the environment
Conducted a comprehensive forensic investigation
Changed administrative credentials
Changed all user credentials
Enhanced our security measures
Changes made: Implemented and will continue to implement additional cybersecurity measures as well as policies and procedures to safeguard sensitive information
Offered twelve (12) months of complimentary credit monitoring and identity theft restoration services through Kroll
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGJun 8 · first

Indiana State AG+1d

Nebraska State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/f23ed54e-9c4f-4257-8f73-c710de9592ca.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 9, 2026
Raw hash: 4a54e66cc78d59bed07fa2f27e0a16bef682196e5511772528e242f1f47c5162

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityTaos Mountain Casino

Incidentdiscovered Mar 28, 2026

Stated responseDisconnected all access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov