Wynn Resorts has recently been targeted by the ShinyHunters hacking group, which claims to have stolen approximately 800,000 records containing sensitive employee data. 

Key Details of the Breach

• Targeted Data: The stolen information reportedly includes full names, email addresses, phone numbers, job positions, salaries, birthdates, and start dates. In some instances, Social Security numbers may also have been compromised.
• The Extortion Threat: The cybercriminals demanded a ransom of $1.5 million in Bitcoin (approximately 23.34 BTC) to prevent the public release of the data. They set an initial deadline of February 23, 2026.
• Method of Attack: The group allegedly gained access by exploiting a vulnerability in Wynn’s Oracle PeopleSoft software using stolen employee credentials, a breach that may have begun as early as September 2025.
• Guest Impact: Currently, there are no strong indications that guest or customer data was compromised; the focus remains on internal employee records. 

Response and Legal Action

• Company Stance: While various cybersecurity outlets and local news have reported the incident, Wynn Resorts has not yet officially confirmed the full extent of the breach or if any ransom was paid.
• Class-Action Lawsuit: A federal class-action lawsuit has already been filed against Wynn Resorts in Nevada by California resident Richard Reed, alleging negligence and failure to protect personal information.
• Wider Context: This incident follows a series of high-profile cyberattacks on Las Vegas casino operators, including MGM Resorts International($100M loss) and Caesars Entertainment ($15M ransom) in 2023.