The Nevada Gaming Control Board (NGCB) has warned casinos statewide of escalating cybersecurity risks, following recent attacks on Wynn Resorts that exposed employee data. The alert, issued last Friday in coordination with the Governor’s Technology Office, underscores the growing vulnerability of the gaming and hospitality industries.
Safeguarding Nevada’s gaming reputation
As the regulator of the world’s most prominent gaming hub, NGCB is assigned to ensure fair play, protecting consumers and employees, and adapting to emerging threats. Cybersecurity now ranks among its most pressing challenges, threatening both financial stability and public trust in casino operations.
At the federal level, agencies such as the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Homeland Security (DHS) are advancing zero-trust frameworks, strengthening software supply chains, and promoting public-private threat intelligence sharing.
Public Statement Concerning Nevada Gaming Control Board Website Security Incident. pic.twitter.com/UoPUp1ZRfC
— Nevada Gaming Control Board (@NevadaGCB) February 28, 2024
Growing threats: Phishing and vishing
Casinos remain prime targets due to their vast financial data and customer networks. Officials warn that phishing, are deceptive emails or texts, and vishing, which are voice-based scams, are increasingly used to breach defences. These tactics exploit urgency and impersonation to bypass security protocols.
In 2023, MGM Resorts had a cyberattack that disrupted hotel and casino operations for days, costing millions. Casinos are part of the broader hospitality sector, which is consistently ranked among the top targets for ransomware and phishing attacks.
Statewide cybersecurity initiatives
Nevada’s 2023 State Cybersecurity Plan set goals for monitoring, resilience, and threat tracking across agencies. In response to a major ransomware incident, lawmakers allocated $300,000 for new initiatives, including statewide threat analysis and the creation of a Security Operations Centre. Assembly Bill 1 further expanded the cyber workforce and strengthened the Office of Information Security & Cyber Defence (OISCD).
Industry vigilance highlighted at conference
Cybersecurity dominated discussions at the World Game Protection Conference in Las Vegas. According to an FBI expert, casino operators must remain vigilant against evolving threats, emphasising that human error remains a critical weak point.
Additionally, establishing zero-trust frameworks and supply chain vetting can reduce exposure.
Expert insights on phishing and vishing
As quoted by several media outlets, “phishing involves deceptive emails, texts, or links designed to trick individuals into revealing credentials or financial details,” explained Adam Miller, deputy director of OISCD. “Vishing, on the other hand, uses phone calls or voicemail to impersonate trusted organisations or vendors.”
Miller stressed that staff should be cautious with requests involving account access, password resets, wire transfers, or payment changes. Employees are advised to verify unexpected communications before clicking links, opening attachments, or sharing sensitive information.
The stakes for casinos
@NevadaGCB
— Nevada Gaming Control Board (@NevadaGCB) September 14, 2023
Governor Lombardo and the Nevada Gaming Control Board are monitoring the cybersecurity incident with MGM Resorts and are in communication with company executives. Additionally, the NGCB remains in communication with other law enforcement agencies.
Cyberattacks can trigger financial losses, reputational damage, and disruptions to gaming systems. Past breaches like the 2019 MGM Resorts incident have highlighted the industry’s exposure to persistent and costly threats, as reported by several media outlets.
Cybercrime costs in the casino and hospitality sectors are staggering—global data shows that the average cost of a single breach is around $4.88 million, according to an IBM report in 2024. Meanwhile, high-profile incidents like those at MGM Resorts cost over $100 million in direct losses and operational disruption.
Step inside the world’s biggest iGaming community. Join HERE for weekly updates from the world’s iGaming authority and unlock subscriber-only offers.
