Rivers Casino Data Breach Lawsuit Narrowed in Federal Court A federal court in the Northern District of Illinois has dismissed most claims in a proposed class-action lawsuit against Midwest Gaming & Entertainment LLC, the operator of Rivers Casino Des Plaines, following an August 2023 data breach that exposed the personal information of tens of thousands of employees and customers. The ruling, issued on Monday, allowed only a negligence claim under Illinois’ Personal Information Protection Act (PIPA) to proceed, along with a single plaintiff’s Illinois Consumer Fraud Act claim. The court determined that other allegations, including those related to breach of contract and unjust enrichment, lacked sufficient legal standing. The breach, which compromised sensitive data, led to the lawsuit seeking damages for affected individuals. While the dismissal narrows the case, the surviving claims could still hold Midwest Gaming accountable for alleged failures in safeguarding personal information. The decision underscores the legal challenges plaintiffs face in data breach litigation, particularly in proving harm beyond the exposure of data.