The Maine Office of the Attorney General reported a data breach involving Golden Entertainment on September 24, 2021. The breach occurred on January 24, 2021, when unauthorized access to the network was detected, leading to the compromise of Social Security numbers and affecting a total of 21,912 individuals, including six (6) Maine residents. Written notices were provided to the affected individuals starting September 24, 2021, and identity theft protection services were offered for 12 months through Kroll.

Golden Entertainment, Inc. suffered a data breach between May 30, 2019, and October 6, 2019, where unauthorized actors gained access to employee email accounts. The incident exposed sensitive personal information of 692 California residents, including Social Security numbers and financial account details, while 734 residents were notified overall. The breach primarily involved internal employee data, with attackers exploiting email accounts to harvest confidential records. The compromised information poses significant risks of identity theft, financial fraud, and reputational harm to affected individuals. The prolonged duration of the breach (over four months) suggests potential vulnerabilities in the company’s email security protocols, allowing persistent unauthorized access. The incident underscores the critical need for robust cybersecurity measures to protect employee and customer data from evolving threats.