Multiple class action lawsuits target Wynn data breach

"Omitted from the Notice Letter were the identity of the cybercriminals who perpetrated this Data Breach, the details of the root cause of the Data Breach, the vulnerabilities exploited, and the remedial measures undertaken to ensure such a breach does not occur again."

"In court filings, however, plaintiffs describe what they say is a sweeping failure to protect highly sensitive personal information. They contend the breach has exposed workers and others to long-term risks of identity theft and financial fraud."

"The first of the federal complaints, Reed v. Wynn Resorts Limited, frames the case as a failure to secure personal data that customers and employees were required to provide. It states that Wynn had a duty to safeguard names and Social Security numbers but did not take reasonable steps to do so."

Wynn Resorts is defending against mounting class action lawsuits following a cybersecurity incident where an unauthorized third party accessed employee data. While Wynn claims operations remain unaffected and outside experts investigated the breach, plaintiffs argue the company failed to protect sensitive personal information and exposed workers to identity theft and financial fraud risks. Multiple federal complaints allege Wynn neglected reasonable security measures for names and Social Security numbers and provided inadequate breach notification by omitting details about perpetrators, root causes, exploited vulnerabilities, and remedial actions. One lawsuit identifies ransomware group ShinyHunters as responsible for gaining unauthorized network access.

Read at ReadWrite