Breachesby GlyphCaesars Entertainment
Disclosed Sep 14, 2023Confirmed
Social engineering of IT vendor leads to theft of Caesars Rewards loyalty database
Caesars disclosed that a social engineering attack on an outsourced IT support vendor let an attacker copy its loyalty program database, which included driver's license and Social Security numbers for a significant number of members. It offered credit monitoring to all loyalty members.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 14, 2023 |
| Discovered | Aug 19, 2023 |
| Happened | Aug 23, 2023 |
| Attack | Phishing |
| Data exposed | NamesGovernment IDsSocial Security numbers |
| Sector | Hospitality · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: Caesars EntertainmentWashington Attorney General breach notice: Caesars EntertainmentNotice letter filed with the Delaware DOJ: Caesars EntertainmentOregon DOJ breach notice: Caesars EntertainmentCalifornia AG data breach notice: Caesars Entertainment, Inc.Caesars Entertainment, Inc. Form 8-K, September 14, 2023Indiana Attorney General 2023 data breach report: Caesars Entertainment
Notices filed
Other breaches at Caesars Entertainment
Hacking breachHacking, data exposed not stated. Reported to the Indiana AG.862 affectedMediaUSMay 19Breach, details not statedBreach notice filed with the Indiana AG, details not stated.162 affectedMediaUSSep 1, 2017Breach, details not statedExposed names, Social Security numbers, government IDs and payment cards. Reported to the Indiana AG.1,439 affectedMediaUSNov 28, 2016
History of this record
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/D-BYear-to-Date-Report-2023.pdfby backfillSource
media to hospitalityby seedSource
hacking to phishingby seedSource
["names"] to ["names","government-id","ssn"]by seedSource
2023-10-06 to 2023-09-14by seedSource
empty to Caesars disclosed that a social engineering attack on an outsourced IT support vendor let an attacker copy its loyalty program database, which included driver's license and Social Security numbers for a significant number of members. It offby seedSource
empty to Social engineering of IT vendor leads to theft of Caesars Rewards loyalty databaseby seedSource
[] to ["names"]by backfillSource
unknown to hackingby backfillSource
2023-10-11 to 2023-10-06by backfillSource
empty to 2023-08-19by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.