Published
June 11, 2026
If you gamble or worked at a Station Casinos property in Nevada, this suit alleges a March 2026 cyberattack exposed your Social Security number, passport, and credit card data.
Allegations Only · No Settlement Yet
This article describes a class action complaint. The statements below are unproven allegations. Red Rock Resorts and Station Casinos have not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
Station Casinos — the Las Vegas "locals" casino giant behind Red Rock Resort, Green Valley Ranch, Palace Station, and more than a dozen other Nevada properties — is facing a proposed class action lawsuit over a cyberattack that hit its systems in March 2026. The suit was filed May 28, 2026 in the U.S. District Court for the District of Nevada against Red Rock Resorts, Inc., Station Holdco LLC, and Station Casinos LLC by Susan Geiner, a former employee and current customer of the company.The complaint alleges the company failed to implement reasonable cybersecurity measures, allowing hackers to infiltrate its network, identify valuable files, and download sensitive customer and employee data without being detected. The filing of a complaint is only the beginning of the case: the defendants have not been found liable, no class has been certified, and the allegations remain unproven.
Status
Complaint Filed
Proposed class action filed May 28, 2026 · U.S. District Court, District of Nevada
The Breach
March 5, 2026 cyberattack · disclosed May 21
SSNs, passports, driver's licenses, credit card & tax info reportedly exposed · total affected not yet disclosed
Can I Claim?
No — nothing to claim yet
No settlement, no fund, no claim form at this stage
The Data Breach Behind the Lawsuit
According to the complaint and the company's breach disclosure, the data breach occurred on March 5, 2026. Station Casinos did not publicly disclose the incident until May 21, 2026, when it reported the breach in a filing with the Maine Attorney General's Office and began mailing notification letters to affected individuals. The total number of people affected has not been publicly disclosed.The lawsuit says the stolen information may include:
• Names, email addresses, physical addresses, and phone numbers
• Dates of birth
• Driver's license and passport numbers
• Social Security numbers and tax information
• Credit card information and casino credit details
• Vehicle details
That mix — government identifiers plus financial data — is exactly the kind of information used for identity theft, fraudulent credit applications, and tax-refund fraud, which is why data of this type commands a premium on criminal marketplaces.
What the Class Action Alleges
The complaint alleges Station Casinos failed to take reasonable steps to secure the personal information that customers and employees entrusted to it, and criticizes the company for not disclosing key details about the incident — including the exact dates of the intrusion, its root cause, the vulnerabilities exploited, the remedial measures taken, and the full extent of the information accessed. It brings claims for negligence, negligence per se, breach of implied contract, unjust enrichment, and invasion of privacy, and seeks declaratory and injunctive relief.The plaintiff asks for a jury trial and monetary relief — including actual damages, statutory damages, restitution, and disgorgement — along with credit monitoring and identity theft insurance for affected individuals, court orders requiring the company to strengthen its data security, and attorneys' fees. As with any complaint, these are allegations only; a court has not ruled on whether Station Casinos did anything wrong.
Las Vegas Casinos Keep Getting Hacked
Station Casinos is reportedly the fifth major Las Vegas casino operator hit by a cyberattack in under three years, following high-profile incidents at other Strip operators. The 2023 attacks on MGM Resorts and Caesars Entertainment led to large class action settlements — MGM agreed to a $45 million settlement covering customers from its 2019 and 2023 data incidents. You can see how that played out on our MGM Resorts data breach settlement page.Is There a Settlement or Claim Form Yet?
No. This is a newly filed lawsuit, not a settlement. That means:• There is no settlement fund.
• There is no claim form.
• There is no payout, and no deadline to act.
• Customers and employees do not need to do anything to "join" at this stage.
If the case eventually settles — as many large data-breach class actions do — a court-supervised claims process with its own eligibility rules and deadlines would be announced separately, and we will cover it. For examples of how that stage looks, see our roundup of open data breach settlements.
Who Could Be Affected?
Because no class has been certified, the exact class definition is not final, but the group would generally include customers and employees whose personal information was held on the compromised Station Casinos systems. People most likely to be covered include:• Anyone who received a data-breach notification letter from Station Casinos
• Station Casinos rewards members and customers with casino credit accounts
• Current and former employees of Red Rock Resorts / Station Casinos
Station Casinos has said it is notifying affected individuals and offering 12 months of free credit monitoring and identity theft protection. If you received a letter, keep it — it is the easiest way to confirm class membership if a settlement claims process ever opens.
What Should Affected Customers Do Now?
Even though there is nothing to file in the lawsuit, people caught up in the breach can protect themselves today. Enroll in the free credit monitoring and identity-protection services offered in the breach notice. Review bank and credit card statements and credit reports for accounts or charges you don't recognize, and consider placing a free credit freeze or fraud alert with the credit bureaus — especially important given that Social Security numbers and tax information were reportedly involved. Be alert for phishing calls, texts, and emails that use stolen details to appear legitimate.What Happens Next?
The case will now move through the early stages of federal litigation: the defendants may answer the complaint or move to dismiss, additional complaints from other customers or employees may be filed and consolidated, and the plaintiff will at some point ask the court to certify a class. Each of those steps can take months.OpenClassActions.com will watch the docket for major developments — consolidation, a motion to dismiss, class certification, or a settlement with a claim form — and update this page as the case advances.
Frequently Asked Questions
Is there a Station Casinos settlement yet?
No. The case is a proposed class action lawsuit. There is no settlement, no fund, and no claim form. The company has not been found liable just because a lawsuit was filed.What data was stolen in the breach?
According to the complaint and news reporting, the stolen data may include names, contact details, dates of birth, driver's license and passport numbers, Social Security numbers, tax information, credit card information, casino credit details, and vehicle details.How do I know if I'm affected?
Station Casinos began notifying affected individuals by mail on May 21, 2026. If you received a breach notification letter, you are in the affected group — keep the letter. The company has not publicly said how many people were affected in total.Do I need to file a claim?
No. Because this is a lawsuit and not a settlement, there is nothing to claim and no deadline. If a settlement or certified class ever produces a claims process, eligibility rules and deadlines would be announced then. In the meantime, use the free identity protection offered and watch your accounts.Sources
• U.S. District Court for the District of Nevada — Geiner v. Red Rock Resorts, Inc. et al. (proposed class action complaint)• Las Vegas Review-Journal — Lawsuit seeks class action, damages brought by Station Casinos cyberattack
• FOX5 Vegas — Station Casinos faces class action lawsuit over data breach
• Casino.org — Station Casinos Hit With Class-Action Suit Over Cyberattack
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
For more class actions keep scrolling below.
Status
Complaint Filed — Proposed Class Action
Case Title
Geiner v. Red Rock Resorts, Inc. et al.
Court
U.S. District Court, District of Nevada
Date Filed
May 28, 2026
Breach Date
March 5, 2026 (disclosed May 21, 2026)
News Coverage
Las Vegas Review-Journal
