Riverside Resort & Casino Proposes Data Breach Settlement in Wisconsin Class Action

Riverside Resort & Casino, the Laughlin, Nevada property, has proposed a data breach settlement in a class action pending in Columbia County, Wisconsin, with claims open until 4 January 2027 and a final approval hearing set for 27 January 2027.

The case, No. 2026CV000097 in the Circuit Court for Columbia County, names Riverside Resort & Casino, Inc. and Riverside Resort & Casino, LLC as defendants. It concerns a targeted cyberattack on Riverside's systems in July 2024. Notices went to class members on 5 October 2026, and the court has yet to approve the deal.

What the settlement offers

Every class member receives one year of CyEx Financial Shield Total credit monitoring, which includes $1 million of fraud insurance. On top of that, claimants choose between reimbursement of documented losses and a flat payment that needs no proof.

The flat amounts are estimates. Cash benefits carry an aggregate cap of $1,000,000, and if approved claims exceed it, payouts are reduced pro rata. That makes the $1 million a ceiling rather than a guaranteed pool, and the $50 and $75 figures could move up or down depending on claims volume. GamblingNews reported the overall deal at $1.5 million; the settlement website itself lists the $1 million cash cap and a separate $500,000 fee request.

Who is in the class and what was exposed

The class covers all US residents who were sent notification that their private information was compromised. According to the settlement website, the accessed files held names, addresses, Social Security numbers (SSNs), ID and financial account numbers, and medical and health-insurance information.

Riverside began notifying individuals and state attorneys general on 5 September 2024. Yogonet reported at the time that more than 55,000 customers were affected. A class action over the incident was also filed in Nevada district court in 2024, according to Next.io.

Riverside denies wrongdoing, and the court has not ruled on the merits. The settlement would resolve the claims without any finding of liability.

Fees, service awards and counsel

Class counsel, Murphy Law Firm and Strauss Borrelli PLLC, will ask the court to approve $500,000 in fees and costs. They will also request $2,000 service awards for each class representative. With 11 named representatives, the awards could total up to $22,000. Riverside pays both the fees and the awards, so they are separate from the benefits paid to class members.

Deadlines for class members

Payments follow only after final approval and the resolution of any appeals. Class members who do nothing stay in the class and give up the right to sue separately over the incident. Those who want to keep that right must opt out by 4 December 2026, and anyone who objects must do so by the same date.

Why it matters for casino operators

The settlement shows how long the cost of a breach can run: a July 2024 attack is still producing litigation obligations more than two years later, with claims windows reaching into 2027. For land-based resorts, which hold identity documents, payment data and in some cases health-related information on guests and staff, the categories of data listed in this case are a reminder of what a single intrusion can expose.

Earlier incidents point the same way. Gamingo covered how the IGT cyberattack highlighted gambling security challenges in 2024, and more recently reported on Polymarket resuming trading after a third-party breach. Consumer class actions are also not limited to security failures: readers can compare this case with the class action against Evolution AB over alleged compliance breaches, the federal judge's decision to greenlight the Roblox class action and the NY class action facing Blazesoft over sweepstakes.

What to watch next

The first marker is 4 December 2026, when opt-outs and objections close. The claim deadline follows on 4 January 2027, and Judge-level scrutiny of the fee request and the benefit structure comes at the 27 January 2027 hearing. If the court approves, the administrator, Simpluris, will pay valid claims, and the size of the flat payments will depend on total claim volume against the $1 million cap.

Status reviewed on 3 November 2026. Settlement terms, amounts and dates come from the court-authorised settlement website run by the administrator, Simpluris. More legal news and North America coverage.