Cyber Incident Victim: Las Vegas Sands Corporation
Date:
Feb 2014
Location:
United States of America
Summary
Las Vegas Sands Corp experienced a severe cyberattack that disrupted operations at its Venetian casino, causing widespread system failures including computer and server shutdowns, email and phone outages, and critical IT infrastructure paralysis. The attack involved cascading hardware failures with numerous hard drives wiped, crippling the company's technical capabilities in an unprecedented manner that overwhelmed its engineering teams during the incident response.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On the morning of February 10, 2014, Las Vegas Sands Corp. experienced a catastrophic cyber attack targeting its corporate offices above the Venetian casino on the Las Vegas Strip. The incident began during early hours when most casino operations were inactive, with computer systems abruptly failing across the organization. Technical staff encountered widespread IT infrastructure collapse characterized by cascading system failures, including disabled computers, inoperable email systems, and non-functional phones. Multiple servers and workstations experienced hard drive wipes that erased critical data. Company engineers diagnosed a coordinated cyber attack within one hour of detection, recognizing the unprecedented scale and sophistication of the incident. The attack paralyzed essential technology systems supporting Sands' global gaming operations, which generated $14 billion in annual revenue at the time.
Las Vegas Sands' technical teams responded immediately to contain the damage, though specific remediation steps weren't detailed in available reports. The attack caused significant operational disruption across business functions dependent on the compromised IT infrastructure. Bloomberg Businessweek later characterized the incident as foreshadowing the destructive Sony Pictures hack that would occur months later, noting similarities in data-wiping techniques. No operational details about casino floor systems or guest data were mentioned in the coverage. The company's public statements about attribution or financial impact weren't disclosed in the cited reporting. Security analysts subsequently noted the attack's significance as an early example of destructive cyber operations against major corporations.