A federal judge has ruled that the data breach lawsuit against Rivers Casino Philadelphia can proceed, finding sufficient grounds for the primary negligence claim. The controversy stems from a cyberattack in November 2024, which allegedly compromised sensitive employee data.
Details of the Breach
Chicago-based Rush Street Gaming, Rivers Casino’s parent company, admitted the 2024 breach that exposed employee information. But this admission came in January 2025, two months after the incident. They confirmed that employee data was stolen and offered affected employees one year of free credit monitoring as a mitigation effort. But the breach might not have stopped at staff data. The lawsuit contends patrons’ information was also at risk. Hackers reportedly made off with over 2.56 terabytes of data—potentially equating to approximately 17 million PDF pages of documents. This stolen haul included social security numbers, driver’s licenses, passport details, and bank information.
Court’s Initial Findings
Judge Joshua Wolson of the U.S. District Court for the Eastern District of Pennsylvania reviewed the case, initially put forth by Rivers Casino in March to dismiss the class-action suit. While several allegations were struck down, Wolson sided with plaintiffs on the negligence claim. “Plaintiffs have plausibly alleged that Rivers failed to exercise reasonable care in safeguarding their personal information,” Wolson noted in his decision. Among the claims, plaintiffs pointed to unauthorized credit card use and increased spam communications following the breach. Mark Metzler, one of the plaintiffs, reported unrecognized charges on his Wells Fargo card, while another, Shawn Martin, cited a spike in spam emails and calls.
Responding to Allegations
Rivers Casino’s legal team sought dismissal, arguing that phishing and fraud attempts are widespread issues not exclusively linked to their breach. Despite agreeing with Rivers on several other claims, Judge Wolson allowed the negligence charge to proceed, suggesting a possible direct connection between the breach and plaintiffs’ subsequent issues. Now, Rivers Casino must address the negligence claims before a court schedule is outlined. And industry insiders note that this isn’t the first time a gambling operator faces such scrutiny—cybersecurity remains a critical concern across the board, a pattern familiar to those following regulatory developments.
What’s Next?
With the negligence claim cleared for court, Rivers Casino Philadelphia faces a ticking clock to respond. Once Rivers Casino has submitted its response, a detailed court schedule will be established, setting the stage for further legal proceedings. Regulators and industry observers alike will be watching closely, given the upcoming annual review of cybersecurity protocols.
Eri Gaitu leads the news desk at Best in Slot, tracking breaking developments across the gambling world in real time. From exclusive bonus offers and casino launches to licensing updates and regulatory shifts, Eri ensures readers are always first to know about the changes that matter to their gaming experience.
