Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringIndiana AG filing · September 24, 2026

Boyd Gaming Corporation Confirms Data Breach in Indiana

Boyd Gaming Corporation reported a data security incident to the Indiana Attorney General, affecting personal information of its patrons and employees. The breach, disclosed in September 2026, exposed sensitive data like Social Security Numbers and financial details, raising concerns about potential identity theft. Individuals who received a notification letter may be able to pursue legal options.

This breach is real, not a scam. Boyd Gaming Corporation officially reported it to the Indiana Attorney General on September 24, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a Boyd Gaming Corporation notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Indiana
Breach date
August 25, 2026
Reported
September 24, 2026

What may have been exposed

  • Full Name
  • Social Security Number
  • Date of Birth
  • Driver's License Number
  • Financial Account Details
  • Loyalty Program Credentials
  • Home Address
  • Email Address

Boyd Gaming Corporation, a prominent hospitality and entertainment company, recently reported a data breach to the Indiana Attorney General. The company filed notice of the incident on September 24, 2026, stemming from a breach that occurred on August 25, 2026.

This security incident at Boyd Gaming exposed a range of highly sensitive personal information. Affected individuals may have had their Full Name, Social Security Number, Date of Birth, Driver's License Number, Financial Account Details, Loyalty Program Credentials, Home Address, and Email Address compromised. Such an exposure can lead to serious risks including identity theft and financial fraud.

The compromise of these data types can have lasting consequences. For example, exposed Social Security Numbers are a key tool for identity thieves, while Financial Account Details can be used for unauthorized transactions. Loyalty Program Credentials could also be used in credential-stuffing attacks, impacting other online accounts.

Organizations like Boyd Gaming Corporation are legally obligated to safeguard the personal data they collect through reasonable security measures. When a data breach of this nature occurs, it often indicates that these critical security protocols may have been insufficient to prevent unauthorized access to sensitive systems.

If you have received an official data breach notification letter from Boyd Gaming Corporation, it confirms that your personal information was involved in this incident. Receiving such a letter provides you with legal standing to consider your options, including participating in a class action lawsuit. Our firm handles these cases on a contingency fee basis, meaning there are no out-of-pocket costs unless we successfully secure compensation.

We are actively monitoring the Boyd Gaming Corporation data breach investigation. If you received a notification, connecting with a legal professional can help you understand your rights and potential next steps.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Replace exposed ID documents

    Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.

  • Secure your online accounts

    Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases