DisclosureLens
HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)LowContained

Rivers Casino Des Plaines

bd_f8f75959de3a4e4b · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 2, 2023

Filed

Nov 22, 2023

To disclose

20 days

Affected

132state residents only

Linked

8 filings

Confidence

65%

Rivers Casino Des Plaines experienced unauthorized network access around August 12, 2023, discovered on November 2, 2023. Files containing PII of team members and customers were accessed. No evidence of financial fraud. The company engaged third-party cybersecurity support and law enforcement, and offered one year of Experian IdentityWorks.

Incident timeline

undetected · 82 days
discovery → filing · 20 days

Aug 12, 2023

Begins

Nov 2, 2023

Discovered

Nov 22, 2023

Filed

vs. sector median

5 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filingsup to 21d gap

Filing propagation · 8 filings · 8 states

View merged incident ↗

Pattern: first filing Nov 20 (DE), last Dec 13 (OR) — a 23-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.