HIT Group Reopens Slovenian Casinos After Cyberattack Disrupts Operations
On August 24–25, HIT Group, a major operator of casinos, hotels, and tourism businesses in Slovenia and Bosnia and Herzegovina, detected a cyberattack that forced the temporary closure of six Slovenian casinos: Perla, Park, Casino Drive-in, Mond, Korona, and Casino Fontana. While its hotels remained open, the attack disrupted cash registers, gaming systems, and hotel reception services, with some customers receiving handwritten receipts at affected venues.
HIT immediately launched a forensic investigation, engaging external cybersecurity experts and notifying relevant government authorities. By August 28, the company announced partial system restoration, allowing casinos to reopen with limited operations primarily slot machines while table games, bingo, and loyalty programs remained offline. The company did not confirm whether all properties would reopen simultaneously or disclose the attack’s origin, potential data breaches, or financial impact.
Despite the disruption, HIT’s subsidiaries, Casino Larix and HIT Alpinea, continued normal operations. In a statement, HIT’s management board chairman, Sandi Bratasevec, emphasized the company’s commitment to strengthening its IT infrastructure and security moving forward. As of August 31, HIT’s systems remained in a limited operational state.
Casinos Austria International cybersecurity rating report: https://www.rankiteo.com/company/casinos-austria-international
Perla Group Montenegro cybersecurity rating report: https://www.rankiteo.com/company/perla-group-montenegro
HIT d.d. Nova Gorica cybersecurity rating report: https://www.rankiteo.com/company/hit-d-d-
"id": "CASPERHIT1788202871",
"linkid": "casinos-austria-international, perla-group-montenegro, hit-d-d-",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Gaming, Hospitality, Tourism',
'location': 'Slovenia, Bosnia and Herzegovina',
'name': 'HIT Group',
'type': 'Casino and hospitality operator'}],
'customer_advisories': 'Updates on system status and operational limitations '
'provided',
'date_detected': '2024-08-24',
'date_publicly_disclosed': '2024-08-28',
'description': 'On August 24–25, HIT Group, a major operator of casinos, '
'hotels, and tourism businesses in Slovenia and Bosnia and '
'Herzegovina, detected a cyberattack that forced the temporary '
'closure of six Slovenian casinos: Perla, Park, Casino '
'Drive-in, Mond, Korona, and Casino Fontana. The attack '
'disrupted cash registers, gaming systems, and hotel reception '
'services, with some customers receiving handwritten receipts '
'at affected venues.',
'impact': {'downtime': 'Partial closure from August 24–28, limited operations '
'thereafter',
'operational_impact': 'Temporary closure of six casinos, '
'handwritten receipts issued, table games, '
'bingo, and loyalty programs remained '
'offline',
'systems_affected': 'cash registers, gaming systems, hotel '
'reception services'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Commitment to strengthening IT infrastructure and '
'security moving forward',
'post_incident_analysis': {'corrective_actions': 'Strengthening IT '
'infrastructure and '
'security'},
'references': [{'date_accessed': '2024-08-31',
'source': 'HIT Group Public Statement'}],
'regulatory_compliance': {'regulatory_notifications': 'Relevant government '
'authorities notified'},
'response': {'communication_strategy': 'Public statements issued, updates on '
'system status',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Relevant government authorities '
'notified',
'remediation_measures': 'Partial system restoration, limited '
'operations resumed',
'third_party_assistance': 'External cybersecurity experts '
'engaged'},
'title': 'Cyberattack on HIT Group Disrupts Slovenian Casino Operations',
'type': 'Cyberattack'}