Cyber Incident Victim: Four Queens Hotel and Casino
Date:
Mar 2020
Location:
United States of America
Summary
A ransomware attack disrupted operations at Four Queens Hotel and Casino and another Las Vegas establishment, rendering slot machines inoperable for nearly a week. The casinos remained open but were forced to operate on a cash-only basis for several days, with social media footage showing rows of disabled gaming devices. Nevada gaming authorities confirmed they were actively investigating the incident, which exhibited characteristics consistent with ransomware compromises. The event caused visible operational disruptions and drew public attention through widespread video documentation of the impacted casino floors.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around March 3, 2020, Four Queens Hotel and Casino and Binion’s Casino in downtown Las Vegas experienced a disruptive incident affecting their slot machine operations. The attack rendered rows of slot machines inoperable, forcing both establishments to operate on a cash-only basis for several days. Casino floors remained largely empty during this period, with social media platforms like Twitter circulating videos showing the scale of the disruption. The incident displayed characteristics consistent with a ransomware attack, though no specific threat actor or ransom demand was publicly confirmed. Operational impacts persisted for nearly a week before normal functions were restored.
The Nevada State Game Control Board initiated an investigation into the incident, stating it was “actively monitoring the situation” but disclosing no technical specifics about the attack vector or compromised systems. Both casinos remained open for general business despite the slot machine outage, indicating containment measures limited the disruption to specific gaming systems. No customer data breaches or financial compromises beyond the slot machine downtime were reported. The incident drew public attention due to the visible operational disruption in a high-traffic tourist environment, though full restoration occurred within approximately six days. No further updates regarding attribution or forensic findings were disclosed in the available reporting.