Golden Entertainment

Summary

Golden Entertainment experienced a malware infection affecting certain portions of its network, potentially compromising personal information of individuals. The company discovered the incident in late January and initiated an investigation, finding no evidence of actual or attempted misuse of the impacted data. While the specific information involved varied by individual, Golden notified potentially affected parties and reinforced its security measures to prevent similar occurrences. A dedicated support line was established to address inquiries related to the incident.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Golden Entertainment, Inc. discovered malware affecting portions of its network in late January 2021. The company initiated an investigation upon detection to determine the nature and scope of the incident. While the investigation confirmed unauthorized access to systems through malware, Golden found no evidence of actual or attempted misuse of personal information related to the event. The company did not disclose technical specifics regarding the malware variant, intrusion methods, or exact network segments compromised. Impacted information varied among affected individuals, though the notification did not enumerate specific data elements exposed. Golden completed its forensic review and containment measures without specifying remediation timelines or technical countermeasures implemented.

The organization began notifying potentially affected individuals approximately eight months after discovery, issuing public communication on September 24, 2021. Notifications emphasized Golden's commitment to information security while acknowledging potential privacy risks stemming from the malware intrusion. A dedicated toll-free assistance line (855-551-1533) was established for inquiries, though no complimentary credit monitoring or identity protection services were referenced in the disclosure. The company maintained its position that no fraudulent activity tied to the incident had been observed at the time of notification. Golden described implementing unspecified additional security measures following the investigation while urging vigilance regarding identity theft and fraud among notification recipients. No regulatory fines, operational disruptions, or financial impacts were acknowledged in the public statement.

Sources

Sources available to members: 1 source.