Boyd Gaming Corporation

Boyd Gaming Corporation reported a data breach to the Montana Attorney General. The breach was reported on 2025-09-24. The breach occurred from 09/05/2025 to 09/07/2025. 40 Montana residents were affected.

Affected (this filing): 40

Boyd Gaming Corporation reported a data breach affecting 25 Maine residents, which occurred from September 5 to September 7, 2025. The company discovered the breach on September 6, 2025, and notified affected individuals on September 24, 2025. Identity theft protection services were offered through IDX.

Affected (this filing): 25

Boyd Gaming Corporation notified the California Attorney General of a cyber incident involving unauthorized removal of personal information (names and other data elements) from its systems. The unauthorized activity occurred between September 5 and September 7, 2025, and was discovered on September 6, 2025. The company engaged external cybersecurity experts and coordinated with federal law enforcement. Affected individuals were offered two years of complimentary credit monitoring.

Boyd Gaming Corporation notified Vermont AG of a cyber incident involving unauthorized removal of personal information (names) from its systems. The incident occurred between September 5-7, 2025. The company engaged external cybersecurity experts and federal law enforcement, terminated unauthorized access, and offered two years of complimentary credit monitoring. 16 Rhode Island residents were confirmed affected.

Boyd Gaming Corporation based in Las Vegas, Nevada, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-09-06 and reported on 2025-10-02. 4,300 Texas residents were affected. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Date of Birth. Consumers were notified via U.S. Mail.

Affected (this filing): 4,300

Boyd Gaming Corporation, a hospitality sector entity reported a data breach to the Iowa Attorney General. The breach was reported on 2025-10-02.

Boyd Gaming Corporation reported a cyber incident to the New Hampshire Attorney General. Unauthorized access occurred Sept 5-7, 2025, resulting in the exfiltration of personal information (names, addresses, DOB, driver's license, SSN) of 40 NH residents. Boyd discovered the incident on Sept 6, 2025, and notified affected individuals on Sept 24, 2025. Remediation included password resets and enhanced security controls.

Affected (this filing): 40