Golden Entertainment, Inc. suffered a data breach between **May 30, 2019, and October 6, 2019**, where unauthorized actors gained access to employee email accounts. The incident exposed sensitive personal information of **692 California residents**, including **Social Security numbers and financial account details**, while **734 residents** were notified overall. The breach primarily involved internal employee data, with attackers exploiting email accounts to harvest confidential records. The compromised information poses significant risks of identity theft, financial fraud, and reputational harm to affected individuals. The prolonged duration of the breach (over **four months**) suggests potential vulnerabilities in the company’s email security protocols, allowing persistent unauthorized access. The incident underscores the critical need for robust cybersecurity measures to protect employee and customer data from evolving threats.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-186886
TPRM report: https://www.rankiteo.com/company/golden-ent
"id": "gol1021090725",
"linkid": "golden-ent",
"type": "Breach",
"date": "5/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '692 (California residents)',
'industry': 'Gaming and Hospitality',
'location': 'Las Vegas, Nevada, USA',
'name': 'Golden Entertainment, Inc.',
'type': 'Corporation'},
{'industry': 'Legal/Regulatory',
'location': 'California, USA',
'name': 'California Office of the Attorney General',
'type': 'Government Agency'}],
'attack_vector': 'Compromised Email Accounts',
'customer_advisories': '692 California residents notified of personal '
'information compromise',
'data_breach': {'data_exfiltration': 'Likely (data accessed via email '
'accounts)',
'number_of_records_exposed': '692',
'personally_identifiable_information': 'Yes (SSNs and '
'financial data)',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'financial account information']},
'date_detected': '2019-10-06',
'date_publicly_disclosed': '2020-01-31',
'description': 'Unauthorized access to employee email accounts at Golden '
'Entertainment, Inc. resulted in the compromise of personal '
'information, including Social Security numbers and financial '
'account information, of 692 California residents. The breach '
'was detected and reported by the California Office of the '
'Attorney General on January 31, 2020, with the unauthorized '
'access occurring between May 30, 2019, and October 6, 2019.',
'impact': {'data_compromised': ['Social Security numbers',
'financial account information'],
'identity_theft_risk': 'High (SSNs and financial data exposed)',
'payment_information_risk': 'High (financial account information '
'exposed)',
'systems_affected': ['employee email accounts']},
'initial_access_broker': {'entry_point': 'Employee email accounts',
'high_value_targets': ['employee data',
'customer PII']},
'investigation_status': 'Reported; details limited',
'references': [{'date_accessed': '2020-01-31',
'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulations_violated': ['California Consumer '
'Privacy Act (CCPA)',
'California Data Breach '
'Notification Law'],
'regulatory_notifications': 'California Office of '
'the Attorney General'},
'response': {'communication_strategy': 'Notification to 734 California '
'residents (692 confirmed affected)'},
'title': 'Golden Entertainment, Inc. Data Breach (2019-2020)',
'type': 'Data Breach'}