Station Casinos data breach: one employee account and its files accessed, 43,838 people

What happened at Station Casinos?

The company's filing with New Hampshire says it was alerted to unauthorized activity on its network on March 5, 2026, secured its systems and brought in a forensic firm. On or about April 15, 2026 the investigation found that the activity may have included access to files with personal information.

In a statement to 8 News Now on June 1, 2026, the company said the intruder had accessed a single employee's account and its associated files, that the incident had no impact on its properties or operations, and that it did not expect a material effect on its finances. It said it worked with outside cybersecurity experts and law enforcement.

Date	What happened	Source
March 5, 2026	Suspicious activity found; systems secured, forensic firm engaged	NH filing; Indiana report
April 15, 2026	Investigation finds files with personal information may have been accessed	NH filing
May 21, 2026	Letters mailed; five New Hampshire residents among them	NH filing; Indiana report
May 26, 2026	New Hampshire DOJ stamps the filing received	NH filing
June 1, 2026	Company confirms the incident to 8 News Now	8 News Now

Letters went out 77 days after the activity was found and 36 days after the files were identified. The notice-delay guide shows how that compares.

What information was exposed?

The letter says the information may include the person's name and other elements, which are filled in for each recipient; the filed sample does not list them. Check your own letter for the exact items. If it lists a Social Security or driver's license number, a credit freeze is the stronger step.

How many people were affected?

43,838 in total, per Indiana's report, including 22 Indiana residents. The New Hampshire filing counts five residents of that state. Neither the company's letter nor its statement gives a total. The largest data breaches of 2026 shows where it sits this year.

Is Station Casinos offering credit monitoring?

Yes. The letter offers Experian IdentityWorks at no cost for 12 or 24 months, depending on the letter, with an enrollment deadline and activation code printed in each one. Enrollment is at experianidworks.com/3bcredit. Questions go to 888-500-5641, Monday to Friday, 9:00 a.m. to 9:00 p.m. Eastern Time. The guide to credit monitoring offers explains how monitoring differs from a freeze, which is free with each of the three bureaus.

Was it ransomware?

Nothing in the record says so. The filing and the company's statement describe unauthorized access to an employee account and its files, not encryption or a ransom demand, and the company says its casinos kept running.

What the record leaves open

• How the employee account was accessed.
• Whether the people affected are guests, employees or both.
• Which data elements appear in each letter.