Is there a Station Casinos data breach settlement yet?

No. The case is a newly filed proposed class action lawsuit. There is no settlement, no settlement fund, and no claim form at this stage. Station Casinos and Red Rock Resorts have not been found liable, and affected customers and employees do not need to do anything to join the case right now.

What happened in the Station Casinos data breach?

According to the company's breach disclosure and news reporting, hackers gained access to Station Casinos systems in an incident dated March 5, 2026. The company disclosed the breach on May 21, 2026 in a filing with the Maine Attorney General's Office and began notifying affected individuals the same day. The total number of people affected has not been publicly disclosed.

What information was exposed in the Station Casinos breach?

Per the complaint and news reporting, the stolen information may include names, email and physical addresses, phone numbers, dates of birth, driver's license numbers, passport numbers, vehicle details, credit card information, Social Security numbers, tax information, and casino credit details.

What does the Station Casinos class action allege?

The proposed class action, filed May 28, 2026 in the U.S. District Court for the District of Nevada by a former employee and current customer, alleges the company failed to implement reasonable cybersecurity measures, letting hackers infiltrate its systems and download data undetected. It brings claims for negligence, negligence per se, breach of implied contract, unjust enrichment, and invasion of privacy. These are unproven allegations.

Do I need to file a claim for the Station Casinos lawsuit?

No. Because this is a lawsuit and not a settlement, there is nothing to claim and no deadline to act. If the case later settles or a class is certified, a claims process with its own deadlines would be announced. In the meantime, people who received a breach notice can enroll in the free identity protection Station Casinos has offered and monitor their accounts for suspicious activity.

Station Casinos Data Breach Class Action Lawsuit

By Steve Levine

Published: June 11, 2026

▼ Allegations Only · No Settlement Yet

This article describes a class action complaint. The statements below are unproven allegations. Red Rock Resorts and Station Casinos have not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.

Status Complaint Filed Proposed class action filed May 28, 2026 · U.S. District Court, District of Nevada

The Breach March 5, 2026 cyberattack · disclosed May 21 SSNs, passports, driver's licenses, credit card & tax info reportedly exposed · total affected not yet disclosed

Can I Claim? No — nothing to claim yet No settlement, no fund, no claim form at this stage

What Is This About?

Station Casinos — the Las Vegas "locals" casino giant behind Red Rock Resort, Green Valley Ranch, Palace Station, and more than a dozen other Nevada properties — is facing a proposed class action lawsuit over a cyberattack that hit its systems in March 2026. The suit was filed May 28, 2026 in the U.S. District Court for the District of Nevada against Red Rock Resorts, Inc., Station Holdco LLC, and Station Casinos LLC by Susan Geiner, a former employee and current customer of the company.

The complaint alleges the company failed to implement reasonable cybersecurity measures, allowing hackers to infiltrate its network, identify valuable files, and download sensitive customer and employee data without being detected. The filing of a complaint is only the beginning of the case: the defendants have not been found liable, no class has been certified, and the allegations remain unproven.

The Data Breach Behind the Lawsuit

According to the complaint and the company's breach disclosure, the data breach occurred on March 5, 2026. Station Casinos did not publicly disclose the incident until May 21, 2026, when it reported the breach in a filing with the Maine Attorney General's Office and began mailing notification letters to affected individuals. The total number of people affected has not been publicly disclosed.

The lawsuit says the stolen information may include:

• Names, email addresses, physical addresses, and phone numbers
• Dates of birth
• Driver's license and passport numbers
• Social Security numbers and tax information
• Credit card information and casino credit details
• Vehicle details

That mix — government identifiers plus financial data — is exactly the kind of information used for identity theft, fraudulent credit applications, and tax-refund fraud, which is why data of this type commands a premium on criminal marketplaces.

What the Class Action Alleges

The complaint alleges Station Casinos failed to take reasonable steps to secure the personal information that customers and employees entrusted to it, and criticizes the company for not disclosing key details about the incident — including the exact dates of the intrusion, its root cause, the vulnerabilities exploited, the remedial measures taken, and the full extent of the information accessed. It brings claims for negligence, negligence per se, breach of implied contract, unjust enrichment, and invasion of privacy, and seeks declaratory and injunctive relief.

The plaintiff asks for a jury trial and monetary relief — including actual damages, statutory damages, restitution, and disgorgement — along with credit monitoring and identity theft insurance for affected individuals, court orders requiring the company to strengthen its data security, and attorneys' fees. As with any complaint, these are allegations only; a court has not ruled on whether Station Casinos did anything wrong.

Las Vegas Casinos Keep Getting Hacked

Station Casinos is reportedly the fifth major Las Vegas casino operator hit by a cyberattack in under three years, following high-profile incidents at other Strip operators. The 2023 attacks on MGM Resorts and Caesars Entertainment led to large class action settlements — MGM agreed to a $45 million settlement covering customers from its 2019 and 2023 data incidents. You can see how that played out on our MGM Resorts data breach settlement page.

Is There a Settlement or Claim Form Yet?

No. This is a newly filed lawsuit, not a settlement. That means:

• There is no settlement fund.
• There is no claim form.
• There is no payout, and no deadline to act.
• Customers and employees do not need to do anything to "join" at this stage.

If the case eventually settles — as many large data-breach class actions do — a court-supervised claims process with its own eligibility rules and deadlines would be announced separately, and we will cover it. For examples of how that stage looks, see our roundup of open data breach settlements.

Who Could Be Affected?

Because no class has been certified, the exact class definition is not final, but the group would generally include customers and employees whose personal information was held on the compromised Station Casinos systems. People most likely to be covered include:

• Anyone who received a data-breach notification letter from Station Casinos
• Station Casinos rewards members and customers with casino credit accounts
• Current and former employees of Red Rock Resorts / Station Casinos

Station Casinos has said it is notifying affected individuals and offering 12 months of free credit monitoring and identity theft protection. If you received a letter, keep it — it is the easiest way to confirm class membership if a settlement claims process ever opens.

What Should Affected Customers Do Now?

Even though there is nothing to file in the lawsuit, people caught up in the breach can protect themselves today. Enroll in the free credit monitoring and identity-protection services offered in the breach notice. Review bank and credit card statements and credit reports for accounts or charges you don't recognize, and consider placing a free credit freeze or fraud alert with the credit bureaus — especially important given that Social Security numbers and tax information were reportedly involved. Be alert for phishing calls, texts, and emails that use stolen details to appear legitimate.

What Happens Next?

The case will now move through the early stages of federal litigation: the defendants may answer the complaint or move to dismiss, additional complaints from other customers or employees may be filed and consolidated, and the plaintiff will at some point ask the court to certify a class. Each of those steps can take months.

OpenClassActions.com will watch the docket for major developments — consolidation, a motion to dismiss, class certification, or a settlement with a claim form — and update this page as the case advances.

Frequently Asked Questions

Is there a Station Casinos settlement yet?

No. The case is a proposed class action lawsuit. There is no settlement, no fund, and no claim form. The company has not been found liable just because a lawsuit was filed.

What data was stolen in the breach?

According to the complaint and news reporting, the stolen data may include names, contact details, dates of birth, driver's license and passport numbers, Social Security numbers, tax information, credit card information, casino credit details, and vehicle details.

How do I know if I'm affected?

Station Casinos began notifying affected individuals by mail on May 21, 2026. If you received a breach notification letter, you are in the affected group — keep the letter. The company has not publicly said how many people were affected in total.

Do I need to file a claim?

No. Because this is a lawsuit and not a settlement, there is nothing to claim and no deadline. If a settlement or certified class ever produces a claims process, eligibility rules and deadlines would be announced then. In the meantime, use the free identity protection offered and watch your accounts.