Full House Resorts, Inc. Data Breach — Class Action Review

Full House Resorts, Inc. operates in the hospitality and gaming industry, owning, developing, and managing casinos and resort properties across multiple jurisdictions. Because of the nature of its operations, the company routinely collects and maintains a vast volume of sensitive, personally identifiable information from its guests, loyalty club members, employees, and business partners. This data typically includes comprehensive personal profiles, credit card and banking details, transaction histories, government-issued identification numbers, and extensive employee personnel records necessary for payroll and human resources administration.

In 2025, Full House Resorts, Inc. reported a significant data security incident to the New Hampshire Attorney General's office. In the hospitality and entertainment sector, breaches of this magnitude frequently involve sophisticated cyberattacks, such as ransomware deployments, unauthorized network intrusions targeting guest reservation databases or internal administrative servers, or vulnerabilities within third-party vendor systems that handle payment processing and loyalty program management. These incidents often expose the digital infrastructure supporting both on-site operations and online booking portals.

The exposure of this information places affected individuals at severe and ongoing risk of identity theft, financial fraud, and targeted phishing scams. Compromised financial details and credit card numbers can lead to unauthorized account charges and financial account takeover. Furthermore, the exposure of Social Security numbers, dates of birth, and home addresses provides malicious actors with the precise ingredients necessary to open fraudulent lines of credit, file false tax returns, or impersonate victims in various financial and administrative contexts.

Under state consumer protection laws and applicable federal regulations, Full House Resorts, Inc. had a legal and fiduciary obligation to implement robust administrative, technical, and physical safeguards to protect the sensitive data entrusted to it. The occurrence of a data breach strongly suggests that these security measures may have been deficient, outdated, or improperly configured, representing a potential failure of the company's duty of care. Companies that collect and monetize consumer and employee data are legally required to maintain reasonable security practices to prevent unauthorized access.

Receiving a data breach notification letter from Full House Resorts, Inc. is a formal acknowledgment that your private information was compromised due to corporate security failures. Legally, this notice often establishes the foundational standing required to participate in a class action lawsuit seeking accountability, restitution, and enhanced cybersecurity measures. Individuals affected by this incident do not need to wait until they experience direct financial loss to seek legal recourse, and our firm evaluates these claims on a contingency fee basis, meaning you pay nothing unless we successfully recover compensation on your behalf.