Cyber Incident Victim: Golden Entertainment
Date:
May 2019
Location:
United States of America
Summary
Golden Entertainment experienced a cybersecurity incident involving unauthorized access to employee email accounts over several months. The breach impacted customers, employees, and vendors, prompting notifications after an investigation revealed intruders repeatedly accessed accounts but could not confirm which specific emails or attachments were viewed. The company conducted additional reviews of all email account contents to assess potential data exposure.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Golden Entertainment, a leading gaming company, experienced a significant cyber incident involving unauthorized access to employee email accounts. The incident was discovered during an investigation, which revealed that access was obtained multiple times, although the specific emails and attachments accessed could not be determined. As a result, a further review of the emails and attachments in the employees' accounts was conducted to assess the potential impact of the incident.
The investigation into the incident found that the unauthorized access was obtained through the email accounts of Golden Entertainment employees. The company took immediate action to contain the incident and prevent further unauthorized access. However, the investigation was unable to determine the specific emails and attachments that were accessed during the incident. This lack of information made it challenging for the company to assess the full extent of the incident and the potential impact on its operations.
The incident compromised the confidentiality of sensitive information, as unauthorized individuals gained access to employee email accounts. However, the integrity and availability of the data were not affected, as there was no evidence of data manipulation or disruption to the company's operations. The incident highlights the importance of protecting sensitive information and the need for robust security measures to prevent unauthorized access.
Golden Entertainment took steps to notify affected parties, including employees, customers, and vendors, about the incident. The company also conducted a thorough review of its security measures to identify areas for improvement and prevent similar incidents in the future. The incident serves as a reminder of the importance of cybersecurity and the need for companies to remain vigilant in protecting their sensitive information.
The incident also highlights the challenges of investigating cyber incidents, particularly when it comes to determining the extent of unauthorized access. In this case, the investigation was unable to determine the specific emails and attachments that were accessed, making it challenging to assess the full impact of the incident. This lack of information underscores the importance of implementing robust security measures, including logging and monitoring, to detect and respond to cyber incidents.
The incident at Golden Entertainment is a reminder that cyber incidents can occur at any time and can have significant consequences for companies. The incident highlights the importance of protecting sensitive information and the need for robust security measures to prevent unauthorized access. Companies must remain vigilant in protecting their sensitive information and be prepared to respond quickly and effectively in the event of a cyber incident.
The incident also underscores the importance of transparency and communication in responding to cyber incidents. Golden Entertainment took steps to notify affected parties about the incident, which is essential for maintaining trust and confidence in the company. Companies must be prepared to communicate effectively with stakeholders in the event of a cyber incident, including providing timely and accurate information about the incident and the steps being taken to respond to it.
Overall, the cyber incident at Golden Entertainment highlights the importance of cybersecurity and the need for companies to remain vigilant in protecting their sensitive information. The incident serves as a reminder of the challenges of investigating cyber incidents and the importance of implementing robust security measures to prevent unauthorized access. Companies must be prepared to respond quickly and effectively in the event of a cyber incident and communicate transparently with stakeholders about the incident and the steps being taken to respond to it.