Boyd Gaming boydgaming.com Boyd Gaming data breach: what happened and what to do
Boyd Gaming told the SEC on September 23, 2025 that an unauthorized third party removed data from its IT systems, including information about employees and a limited number of other people. The company hasn't published a total or a list of data types.
View all 13,115 breaches- Breach date
- 5 Sept 2025
- Made public
- 23 Sept 2025
- Last updated
What happened
Boyd Gaming, the Las Vegas casino operator, filed an 8-K with the SEC on September 23, 2025. It says an unauthorized third party accessed its internal IT systems and removed certain data, including information about employees and a limited number of other individuals. Boyd says its properties and business operations weren't affected, and that it is notifying the people involved and the regulators it must tell.
Boyd's California Attorney General listing dates the breach to September 5, 2025 and the notice to October 1, 2025.
What Boyd hasn't said
Boyd hasn't said how many people are affected, what the third party was after, or which types of data were taken. The filing doesn't name an attacker. Until the company or a regulator says more, the safe assumption is that anything an employer holds could be involved: name, address, date of birth and Social Security number.
A former employee filed a proposed class action in Nevada federal court in late September 2025, according to CasinoBeats. The complaint alleges that names, dates of birth and Social Security numbers were taken and that Boyd was slow to notify people. Those are allegations, and Boyd has not admitted them.
If you work or worked for Boyd
Watch your mail for a notice letter. It will say what was taken in your case, and whether Boyd is paying for credit monitoring. Don't rely on a phone call or text that claims to be from Boyd: use the number on your letter.
What to do if you were in it
- 1
Wait for your notice letter and read it closely
It says what data of yours was involved. If it offers free credit monitoring, sign up before the deadline.
- 2
Freeze your credit
If your Social Security number or date of birth might be involved, a free freeze at Equifax, Experian and TransUnion blocks most new accounts opened in your name.
- 3
Expect phishing that mentions Boyd
Be wary of emails, texts and calls about the breach, payroll or benefits. Contact HR using details you already have.
- 4
Check your credit reports
Look for accounts or inquiries you don't recognize at annualcreditreport.com, and review your bank statements.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which other breaches include your email or phone.
Frequently asked
Was I affected by the Boyd Gaming data breach?
Boyd says it is notifying the people involved, mainly employees and a limited number of others. Look for a letter. Boyd hasn't published a total.
What was exposed?
Boyd's SEC filing doesn't say. A lawsuit alleges names, dates of birth and Social Security numbers, which Boyd hasn't confirmed.
Is there a settlement?
Boyd hasn't announced one. A proposed class action was filed in September 2025.
Should I freeze my credit?
If you're an employee or former employee, it's a cheap precaution. A freeze is free and easy to lift.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
