Jackpot Junction Casino, located in Morton, Minnesota, within the Lower Sioux Indian Community, has been disrupted by a **ransomware attack** attributed to the criminal group **RansomHub**. The incident, first reported as 'technical issues' on **March 27**, has severely impacted critical operations, including **slot machines, kiosks, phone systems, hotel reservations, and select restaurants**. As of **April 3**, slot machines and kiosks remain non-functional, though table gaming is operational. The casino has not confirmed whether **customer data was compromised**, but the attack forced partial shutdowns of guest services, financial transactions (via slots/kiosks), and communication systems. The prolonged outage suggests operational and reputational damage, with no immediate resolution in sight. The attack aligns with patterns where ransomware groups disrupt business continuity to extort payments, though the casino has not publicly acknowledged the group’s involvement or labeled the event as a cyber attack.
Source: https://www.keyc.com/2025/04/03/minnesota-casino-hit-by-technical-issues-stopping-some-gaming/
TPRM report: https://www.rankiteo.com/company/jackpot-junction-casino-hotel
"id": "jac4692046092925",
"linkid": "jackpot-junction-casino-hotel",
"type": "Ransomware",
"date": "3/2025",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"{'affected_entities': [{'industry': 'Hospitality and Gaming',
'location': 'Morton, Minnesota (Lower Sioux Indian '
'Community)',
'name': 'Jackpot Junction Casino',
'type': 'Casino and Resort'}],
'customer_advisories': 'Public updates on Facebook and website; no '
'confirmation of data breach',
'date_detected': '2025-03-27',
'date_publicly_disclosed': '2025-04-01',
'description': 'Jackpot Junction Casino in Morton, Minnesota, experienced a '
'ransomware attack that disrupted guest services, slot '
'machines, kiosks, phone systems, hotel reservations, and some '
'restaurants. The casino acknowledged the incident as a '
"'ransomware event' but has not confirmed if customer data was "
'compromised. The ransomware group RansomHub claimed '
'responsibility, though the casino has not officially '
'confirmed this. As of April 3, slot machines and kiosks '
'remained down, while table gaming was operational. The phone '
'system was also still non-functional.',
'impact': {'downtime': {'duration': 'Ongoing as of 2025-04-03 (slot machines, '
'kiosks, phone systems still down)',
'end': None,
'start': '2025-03-27',
'table_gaming': 'Operational as of 2025-04-03'},
'operational_impact': 'Disruption to guest services, slot '
'machines, kiosks, phone systems, hotel '
'reservations, and some restaurants',
'systems_affected': ['Slot machines',
'Kiosks',
'Phone systems',
'Hotel reservation system',
'Some restaurants']},
'investigation_status': 'Ongoing (as of 2025-04-03)',
'ransomware': {'data_encryption': 'Likely (systems disrupted)'},
'references': [{'date_accessed': '2025-04-03', 'source': 'KEYC News'},
{'date_accessed': '2025-04-03',
'source': 'Jackpot Junction Casino Facebook Page'},
{'date_accessed': '2025-04-03',
'source': 'Jackpot Junction Casino Website'},
{'date_accessed': '2025-04-03', 'source': 'Comparitech'}],
'response': {'communication_strategy': 'Public updates via Facebook and '
'website; no confirmation of data '
'breach or ransomware group '
'involvement',
'recovery_measures': 'Table gaming restored as of 2025-04-03; '
'slot machines, kiosks, and phone systems '
'still down'},
'threat_actor': 'RansomHub (claimed, unconfirmed by casino)',
'title': 'Ransomware Attack on Jackpot Junction Casino',
'type': 'Ransomware Attack'}