Cyber Incident Victim: Itse Ye-Ye Casino
Date:
Oct 2020
Location:
United States of America
Summary
A cyberattack forced the temporary closure of Itse Ye-Ye Casino and another Idaho tribal gaming property, along with a separate California tribal casino, causing significant operational disruption. The Idaho establishments remained shut for approximately ten days before resuming operations, highlighting the growing threat of such incidents within the gaming sector.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Itse Ye-Ye Casino in Kamiah, Idaho, along with the Clearwater River Casino & Lodge in Lewiston, Idaho, and an unspecified California tribal casino, experienced a cyberattack in early October 2020 that forced their temporary closures. The attack occurred shortly before October 8, 2020, when media reports documented the incident's impacts on operations. Both Idaho facilities remained closed for approximately ten consecutive days as a direct result of the cybersecurity incident, disrupting normal gaming and hospitality services. The California casino's closure duration was not specified in available reporting. This coordinated shutdown across multiple tribal gaming properties represented a relatively uncommon operational response to cyber incidents within the casino industry at the time.
The Idaho casinos resumed operations on Monday, October 19, 2020, following remediation efforts, though technical details about the attack vector, data compromise, or ransom demands were not disclosed publicly. Cybersecurity legal experts cited in contemporaneous analysis highlighted the incident's significance as a warning for other gaming establishments to enhance preparedness against similar threats. The ten-day closure period demonstrated substantial operational and financial impacts, though specific loss figures or customer data implications were not quantified in available records. Industry observers noted the event underscored persistent cyber risks facing tribal gaming operations despite their historically lower public breach profile compared to larger commercial casino operators. The incident's resolution occurred without further reported complications following the facilities' reopening.