Rivers Casino Philadelphia is set to confront a proposed class action lawsuit related to a data breach that occurred in 2024, following a federal judge's decision to reject the casino operator's motion to dismiss the case.
On August 7, Judge Joshua D. Wolson of the U.S. District Court for the Eastern District of Pennsylvania determined that the plaintiffs had sufficiently presented a negligence claim against Sugarhouse HSP Gaming LP and Rush Street Gaming LLC, the entities behind Rivers Casino Philadelphia.
The plaintiffs allege that the companies did not implement adequate measures to protect sensitive data, thereby breaching their obligations under common law, contractual agreements, industry standards, and the Federal Trade Commission Act.
The lawsuit originated from a breach identified around November 18, 2024, when an unauthorized individual reportedly accessed and extracted files from the casino's computer servers.
Rivers Casino Philadelphia began informing those affected by the breach around December 30, 2024, approximately six weeks after the incident was discovered. The casino also submitted a notification to the Massachusetts Attorney General's office.
The stolen information is said to have included names, Social Security numbers, and bank account details used for direct deposits. Both current and former employees, as well as customers, were impacted, though the casino has not revealed the precise number of individuals affected.
This case is one of at least three lawsuits filed in the Eastern District of Pennsylvania following the breach. An earlier lawsuit initiated by a Radnor-based law firm on behalf of a Philadelphia resident sought class-action status, compensatory damages, and additional relief. Law firms Levi & Korsinsky and Edelson Lechtzin have also been separately investigating the breach for potentially affected parties.
The plaintiffs contend that the delay in notifying victims has shortened the time available for them to take preventative measures against possible identity theft and fraud.
With the dismissal motion denied, the case will advance to the discovery phase, which could shed light on the extent of the breach and the data security practices at Rivers Casino Philadelphia.