Full House Resorts Inc obo Rising Star Casino Resort Data Breach — Class Action Review

Full House Resorts Inc, operating through entities such as the Rising Star Casino Resort in Indiana, occupies a prominent position in the hospitality, entertainment, and gaming industry. As a multi-faceted resort and casino operator, the company manages extensive hotel accommodations, dining venues, entertainment complexes, and regulated gaming floors. To deliver seamless guest experiences, process financial transactions, manage loyalty reward programs, and maintain regulatory compliance with gaming commissions, the organization routinely collects and stores a vast repository of sensitive personal, financial, and employment-related data from patrons, hotel guests, and staff members.

In 2025, Full House Resorts Inc reported a significant data security incident to the Indiana Attorney General. While investigations into such resort and hospitality sector breaches typically involve sophisticated cyberattacks, unauthorized intrusions into database environments, or the deployment of ransomware by malicious actors, incidents of this nature expose systemic vulnerabilities in corporate digital infrastructure. Threat actors frequently target hospitality networks because they house lucrative streams of payment card data, high-value consumer identities, and extensive internal administrative records, exploiting gaps in perimeter defenses or third-party vendor integrations.

The exposure resulting from this security failure compromises multiple categories of highly sensitive information, each carrying severe downstream risks for affected individuals. Exposed data typically includes full names, dates of birth, Social Security numbers, driver's license numbers, financial account details, payment card information, and loyalty program credentials. The compromise of Social Security numbers and personal identifiers lays the groundwork for pervasive identity theft, tax fraud, and unauthorized credit applications. Meanwhile, the leakage of financial details and transaction histories directly exposes victims to unauthorized account takeovers, fraudulent charges, and immediate monetary losses that require extensive remediation and vigilance.

Under Indiana state data protection statutes, as well as broader consumer protection standards and the Federal Trade Commission Act, Full House Resorts Inc was legally obligated to implement and maintain reasonable, robust security measures to safeguard the confidential information entrusted to its care. By failing to prevent unauthorized access to its network systems, the company potentially breached these statutory duties and industry-standard security frameworks. Organizations that choose to collect and monetize sensitive consumer and employee data bear an absolute legal responsibility to protect it from foreseeable digital threats, and a failure of this magnitude raises serious questions regarding operational negligence.

Receiving a data breach notification letter from Full House Resorts Inc serves as formal legal acknowledgment that your confidential information was compromised due to inadequate corporate security practices. This notification establishes the legal standing necessary to participate in a class action lawsuit aimed at holding the company accountable. Under applicable laws, affected individuals do not need to prove that they have already suffered actual financial fraud or out-of-pocket losses to seek legal recourse; the increased risk of future identity theft and the loss of privacy are sufficient grounds for action. Our law firm is currently investigating potential class action claims on behalf of all impacted individuals on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation for you.