Bayou Data Breach Exposes Sensitive Personal Information of Parkwest Bicycle Casino Customers
In September 2025, Bayou a company handling data for Parkwest Bicycle Casino (PBC) discovered unauthorized access to a web-hosting service storing sensitive customer information. The breach, reported to the Maine Attorney General, prompted an investigation to assess the scope and impact of the incident.
By February 2026, Bayou confirmed that an unauthorized third party may have accessed personal data tied to PBC, though the exact types of exposed information remain undisclosed. Under Maine’s reporting guidelines, compromised data could include names, Social Security numbers, driver’s license details, financial account numbers, passwords, or access codes.
On January 20, 2026, Bayou began notifying affected individuals via mail, providing details on the exposed data and offering 12 months of complimentary credit monitoring. The breach notice filed with Maine authorities outlines the incident but does not specify the number of impacted individuals. Further details on the investigation’s findings have yet to be released.
Source: https://straussborrelli.com/2026/02/04/bayou-media-development-data-breach-investigation/
Parkwest Casinos cybersecurity rating report: https://www.rankiteo.com/company/park-west-casinos-llc
"id": "PAR1770494090",
"linkid": "park-west-casinos-llc",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Gaming/Hospitality',
'name': 'Parkwest Bicycle Casino (PBC)',
'type': 'Casino'},
{'industry': 'Technology/Data Services',
'name': 'Bayou',
'type': 'Data Handling Company'}],
'attack_vector': 'Unauthorized access to web-hosting service',
'customer_advisories': '12 months of complimentary credit monitoring offered',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Driver’s license details',
'Financial account numbers',
'Passwords',
'Access codes']},
'date_detected': '2025-09',
'date_publicly_disclosed': '2026-01-20',
'description': 'In September 2025, Bayou, a company handling data for '
'Parkwest Bicycle Casino (PBC), discovered unauthorized access '
'to a web-hosting service storing sensitive customer '
'information. The breach, reported to the Maine Attorney '
'General, prompted an investigation to assess the scope and '
'impact of the incident. By February 2026, Bayou confirmed '
'that an unauthorized third party may have accessed personal '
'data tied to PBC, though the exact types of exposed '
'information remain undisclosed. Under Maine’s reporting '
'guidelines, compromised data could include names, Social '
'Security numbers, driver’s license details, financial account '
'numbers, passwords, or access codes. On January 20, 2026, '
'Bayou began notifying affected individuals via mail, '
'providing details on the exposed data and offering 12 months '
'of complimentary credit monitoring.',
'impact': {'data_compromised': 'Sensitive personal information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': 'Web-hosting service'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Maine Attorney General'}],
'regulatory_compliance': {'regulations_violated': ['Maine data breach '
'reporting guidelines'],
'regulatory_notifications': 'Reported to Maine '
'Attorney General'},
'response': {'communication_strategy': 'Mail notifications to affected '
'individuals'},
'threat_actor': 'Unauthorized third party',
'title': 'Bayou Data Breach Exposes Sensitive Personal Information of '
'Parkwest Bicycle Casino Customers',
'type': 'Data Breach'}