Rivers Casino Class Action Lawsuit: Data Breach Exposed Customer Information

Case Overview: A class action lawsuit claims Rivers Casino failed to protect customer data, leading to a data breach that exposed sensitive personal information, including Social Security numbers and bank account details.

Consumers Affected: Rivers Casino customers whose personal information was compromised in the data breach.

Court: U.S. District Court for the Eastern District of Pennsylvania

Rivers Casino Philadelphia is under fire for allegedly failing to protect customers’ personal information in a data breach that exposed sensitive details, including Social Security numbers and bank account information. 

The breach, discovered in November 2024, has prompted a class action lawsuit accusing the casino of negligence in safeguarding the private information it collects. 

The lawsuit claims the casino's inadequate cybersecurity measures allowed hackers to access and steal private data, placing customers at risk of identity theft and fraud. It also alleges the casino’s systems lacked reasonable protections, making the breach foreseeable and preventable.

Rivers Casino Data Breach Exposed Customer Information, Lawsuit Claims

Bonnie Hermann, a Pennsylvania resident and casino customer, filed the proposed class action lawsuit after she received a notification in December 2024 informing her that her personal information had been compromised in the breach. 

Following the incident, Hermann reported a series of fraudulent activities tied to her stolen data, including an unauthorized loan application, a new line of credit, and charges to her Apple Card.

Hermann claims she has experienced significant emotional distress, an uptick in spam communications, and the burden of monitoring her accounts for further fraudulent activity. The lawsuit contends that Rivers Casino failed to implement adequate safeguards, leaving customers like Hermann vulnerable.

Consumers Accuse Rivers Casino of Negligence and Cybersecurity Failures

Rivers Casino discovered on November 18, 2024, that an unauthorized third party had accessed its systems, according to the lawsuit. The stolen data included customers’ names, Social Security numbers, and bank account details. The casino began notifying affected individuals on December 30, over a month after discovering the breach.

According to cybersecurity firm Sophos, attackers typically have an average of 11 days before being detected, providing ample time for reconnaissance and data exfiltration. Experts suggest that stronger security measures could have prevented such an attack or at least minimized its impact.

The lawsuit argues that the stolen information, including Social Security numbers, poses a long-term risk to victims, as such details are highly sought after by identity thieves. Stolen data can be sold on the dark web, making victims susceptible to fraud for years. Hermann argues that the casino’s negligence in securing data and its delayed notification exacerbated the harm to affected individuals.

Additionally, she says the casino retained sensitive data longer than necessary and failed to archive or properly dispose of it, leaving it vulnerable to cyberattacks.

Other Companies Face Similar Lawsuits Over Data Breaches

Rivers Casino is not alone in facing legal repercussions for a data breach. Similar lawsuits have targeted companies like Byte Federal, Robinhood, and Duke Energy. Each case highlights alleged failures to protect sensitive personal information, resulting in financial and emotional harm to consumers.

As cyberattacks increase, these lawsuits underscore the need for companies to adopt robust cybersecurity practices and prioritize customer data protection. For Rivers Casino, the litigation serves as a wake-up call and a cautionary tale for businesses handling sensitive information.

Hermann wants to represent anyone whose data was stolen in the breach. She is suing for negligence, (breach of express contract, and breach of implied contract and is seeking damages, restitution, injunctive and declaratory relief, fees, costs, interest.

Case Details

• Lawsuit: Hermann v. Rush Street Gaming LLC and Sugarhouse HSP Gaming, L.P. D/B/A Rivers Casino Philadelphia
• Case Number: 2:25-cv-00130-JDW  
• Court: U.S. District Court for the Eastern District of Pennsylvania 

Plaintiffs' Attorneys

• Samantha E. Holbrook and Andrea L. Bonner (Shub & Johns LLC)

Were you affected by the Rivers Casino data breach? Share your experience in the comments below.