Rivers Casino Des Plaines: Midwest Gaming Gets Court to Toss Most Claims From Data Breach

Rivers Casino Data Breach Lawsuit Narrowed in Federal Court

A federal court in the Northern District of Illinois has dismissed most claims in a proposed class-action lawsuit against Midwest Gaming & Entertainment LLC, the operator of Rivers Casino Des Plaines, following an August 2023 data breach that exposed the personal information of tens of thousands of employees and customers.

The ruling, issued on Monday, allowed only a negligence claim under Illinois’ Personal Information Protection Act (PIPA) to proceed, along with a single plaintiff’s Illinois Consumer Fraud Act claim. The court determined that other allegations, including those related to breach of contract and unjust enrichment, lacked sufficient legal standing.

The breach, which compromised sensitive data, led to the lawsuit seeking damages for affected individuals. While the dismissal narrows the case, the surviving claims could still hold Midwest Gaming accountable for alleged failures in safeguarding personal information. The decision underscores the legal challenges plaintiffs face in data breach litigation, particularly in proving harm beyond the exposure of data.

Source: https://news.bloomberglaw.com/privacy-and-data-security/midwest-gaming-gets-court-to-toss-most-claims-from-data-breach

Rivers Casino Des Plaines cybersecurity rating report: https://www.rankiteo.com/company/riverscasinochi

"id": "RIV1772562562",
"linkid": "riverscasinochi",
"type": "Breach",
"date": "8/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Tens of thousands',
                        'industry': 'Gaming/Hospitality',
                        'location': 'Des Plaines, Illinois, USA',
                        'name': 'Midwest Gaming & Entertainment LLC (Rivers '
                                'Casino Des Plaines)',
                        'type': 'Casino Operator'}],
 'data_breach': {'number_of_records_exposed': 'Tens of thousands',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (personal information)',
                 'type_of_data_compromised': 'Personal information'},
 'date_detected': '2023-08',
 'description': 'A federal court in the Northern District of Illinois has '
                'dismissed most claims in a proposed class-action lawsuit '
                'against Midwest Gaming & Entertainment LLC, the operator of '
                'Rivers Casino Des Plaines, following an August 2023 data '
                'breach that exposed the personal information of tens of '
                'thousands of employees and customers. The ruling allowed only '
                'a negligence claim under Illinois’ Personal Information '
                'Protection Act (PIPA) and a single plaintiff’s Illinois '
                'Consumer Fraud Act claim to proceed.',
 'impact': {'data_compromised': 'Personal information of employees and '
                                'customers',
            'legal_liabilities': 'Lawsuit seeking damages'},
 'investigation_status': 'Ongoing (lawsuit narrowed)',
 'references': [{'source': 'Federal Court Ruling (Northern District of '
                           'Illinois)'}],
 'regulatory_compliance': {'legal_actions': 'Class-action lawsuit',
                           'regulations_violated': ['Illinois Personal '
                                                    'Information Protection '
                                                    'Act (PIPA)']},
 'title': 'Rivers Casino Data Breach Lawsuit',
 'type': 'Data Breach'}