The California Office of the Attorney General disclosed a data breach at Peppermill Casinos, Inc., where unauthorized actors gained access to sensitive payment card data between October 12, 2014, and February 16, 2015. The compromised information included credit/debit cardholder names, card numbers, expiration dates, and security codes (CVV/CVC)—critical details that could facilitate fraudulent transactions or identity theft. The breach was publicly reported on October 13, 2015, nearly a year after the initial intrusion, raising concerns about delayed detection and response. While the exact number of affected individuals was not specified, the exposure of full payment card data poses significant financial risks to customers, including potential unauthorized charges, account takeovers, or phishing attacks leveraging the stolen details. The incident underscores vulnerabilities in the casino’s payment processing systems and the broader implications for consumer trust in an industry handling high volumes of financial transactions.