Ransomware, phishing, and credential stuffing are hitting casino environments in tightly connected waves. In the most recent breakdown cited here, 55% of casino attacks relied on social engineering tactics, and ransomware recovery costs averaged $1.8 million per incident in 2023. Downtime from major intrusions has also become a recurring loss driver, tying operational disruption directly to cyber risk.
Key Takeaways
- In 2023, MGM Resorts International suffered a ransomware attack by the ALPHV/BlackCat group, leading to a 10-day operational shutdown across multiple properties
- Caesars Entertainment paid approximately $15 million in Bitcoin ransom to Scattered Spider hackers in 2023 to restore systems
- Over 60% of online casino platforms reported DDoS attacks in 2022, averaging 2.5 attacks per month per site
- 92% of US casinos have implemented multi-factor authentication (MFA) by 2024
- 65% of European casinos use AI-driven threat detection systems as of 2023
- Investment in casino cybersecurity rose 28% to $1.2 billion globally in 2023
- MGM hack led to $100 million in direct losses from downtime in 2023
- Average cost of a casino data breach reached $4.5 million in 2023
- Caesars breach resulted in $4.7 million SEC disclosure fine in 2024
- GDPR compliance achieved by 78% of EU casinos by 2023
- US states with casino cyber regs increased from 5 to 22 between 2020-2024
- 85% of casinos fined for non-compliance averaged $500k penalties in 2023
- 75% of casino slots use outdated Windows XP, vulnerable to exploits
- 82% of casino networks have unpatched legacy systems exposing them to ransomware
- IoT devices in casinos, like smart locks, have 40% default credentials unchanged
Ransomware, phishing, and DDoS attacks are escalating fast across casinos, driving rising breaches and huge recovery costs.
Related reading
01 · Category
Cyber Threats and Attacks26 stats
01
In 2023, MGM Resorts International suffered a ransomware attack by the ALPHV/BlackCat group, leading to a 10-day operational shutdown across multiple properties
02
Caesars Entertainment paid approximately $15 million in Bitcoin ransom to Scattered Spider hackers in 2023 to restore systems
03
Over 60% of online casino platforms reported DDoS attacks in 2022, averaging 2.5 attacks per month per site
04
In Q1 2024, phishing attempts targeting casino employees increased by 45% year-over-year
05
1,200 gaming websites were hit by malware campaigns in 2023, compromising user data
06
Ransomware incidents in the gaming sector rose 150% from 2021 to 2023
07
73% of casino cyber breaches in 2022 involved insider threats
08
Australia’s Crown Resorts faced a data breach exposing 30 million customer records in 2017
09
40% of Las Vegas Strip casinos experienced attempted hacks during Super Bowl 2024 weekend
10
BetMGM reported a 300% spike in credential stuffing attacks in 2023
11
In 2023, the casino industry saw 250+ reported data breaches affecting 5.2 million records
12
DDoS attacks on iGaming sites peaked at 1.5 Tbps in 2023
13
55% of attacks on casinos used social engineering tactics in 2024
14
Las Vegas casinos blocked 2.4 billion suspicious login attempts in 2023
15
28 major ransomware groups targeted gambling firms in 2023
16
In 2022, 15% of global casino hacks originated from Eastern Europe
17
In 2023, 42% of casino DDoS attacks lasted over 24 hours, disrupting peak hours
18
Social Spider group claimed 12 casino breaches in 2023 alone
19
35% of attacks exploited casino loyalty app vulnerabilities
20
Mobile betting apps saw 120% rise in man-in-the-middle attacks
21
18% of breaches involved stolen casino vendor credentials
22
Cryptojacking hit 25 casino cloud instances in 2023
23
Supply chain attacks via casino software providers up 90%
24
62% of incidents traced to nation-state actors probing casinos
25
Fake casino apps downloaded 5 million times harbored malware
26
Insider data theft rose 22% amid economic pressures in 2023
Interpretation
Cyber Threats and Attacks Interpretation
The casino industry is learning the hard way that while the house always wins, it's currently playing a high-stakes game of digital whack-a-mole against an army of hackers, insiders, and nation-states who keep finding new ways to rig the system from the inside out.
02 · Category
Cybersecurity Measures and Adoption27 stats
01
92% of US casinos have implemented multi-factor authentication (MFA) by 2024
02
65% of European casinos use AI-driven threat detection systems as of 2023
03
Investment in casino cybersecurity rose 28% to $1.2 billion globally in 2023
04
80% of major casinos now employ 24/7 SOC teams post-MGM attack
05
Endpoint detection tools cover 75% of casino employee devices in 2024
06
Zero-trust architecture adopted by 45% of online gambling operators
07
55% of casinos conduct quarterly penetration testing
08
Blockchain for transaction security implemented in 30% of crypto casinos
09
Employee cybersecurity training completion rate at 88% in top-tier casinos
10
SIEM systems integrated in 70% of casino IT infrastructures by 2024
11
Quantum-resistant encryption piloted in 12% of high-stakes casinos
12
95% reduction in phishing success after MFA rollout in tested casinos
13
Incident response plans updated annually in 82% of Nevada properties
14
AI anomaly detection reduced false positives by 60% in casino networks
15
67% of casinos use EDR tools on critical systems
16
85% of casinos use AI-based fraud detection scoring 95% accuracy
17
60% adoption of behavioral biometrics for player authentication
18
Cloud security posture management tools in 50% of hybrid casinos
19
77% conduct AI-simulated red team exercises yearly
20
Privileged access management (PAM) covers 68% critical assets
21
40% of casinos integrated DeceptionGrid honeypots by 2024
22
Data loss prevention (DLP) tools block 99% sensitive exfil attempts
23
52% use secure access service edge (SASE) for remote ops
24
Vulnerability management automation scans daily in 65% sites
25
89% employee phishing simulation success rate improved to 92%
26
SOC-as-a-Service contracted by 35% smaller casinos
27
Ransomware backup air-gapping implemented in 80% enterprises
Interpretation
Cybersecurity Measures and Adoption Interpretation
Casinos have realized that while the house always wins, they can no longer afford to let hackers even place a bet, pouring billions into an AI-augmented, zero-trust, and relentlessly trained digital fortress that proves security is now the most critical odds-maker in the business.
03 · Category
Financial Losses and Impacts24 stats
01
MGM hack led to $100 million in direct losses from downtime in 2023
02
Average cost of a casino data breach reached $4.5 million in 2023
03
Caesars breach resulted in $4.7 million SEC disclosure fine in 2024
04
UK gambling firms lost £1.2 billion to cyber fraud in 2023
05
Ransomware recovery costs for casinos averaged $1.8 million per incident in 2023
06
2023 cyber incidents caused 12% revenue drop for affected Nevada casinos
07
Global iGaming sector cyber losses totaled $2.5 billion in 2023
08
Downtime from MGM attack cost $30 million daily in lost reservations
09
65% of breached casinos faced lawsuits costing average $2.1 million
10
Australian casinos reported $500 million in cyber-related insurance claims 2022-2023
11
Bonus abuse fraud schemes drained $800 million from online casinos in 2023
12
22% increase in cyber insurance premiums for casinos post-2023 attacks
13
Lost player trust post-breach led to 18% churn rate in affected casinos
14
Total cyber fraud in US casinos hit $1.1 billion in 2023
15
Average ransomware demand to casinos hit $5.2 million in 2023
16
Post-breach stock drops averaged 7.4% for listed casino firms
17
Remediation costs consumed 15% of IT budgets in breached casinos
18
$300 million in fraudulent withdrawals from online casinos in 2023
19
Notification costs per breach averaged $450k for large casinos
20
20% long-term revenue loss from reputational damage post-attack
21
Insurance deductibles rose to $10 million for high-risk casinos
22
Chargeback fraud cost online casinos $650 million in 2023
23
Legal settlements from class actions totaled $200 million in 2023
24
Operational downtime equated to $50k per hour for mid-size casinos
Interpretation
Financial Losses and Impacts Interpretation
The house may always win, but these statistics prove that cybercriminals are running a devastatingly profitable side table, cashing in on everything from ransom and fraud to lost trust and legal fees.
More related reading
04 · Category
Regulations, Compliance, and Trends20 stats
01
GDPR compliance achieved by 78% of EU casinos by 2023
02
US states with casino cyber regs increased from 5 to 22 between 2020-2024
03
85% of casinos fined for non-compliance averaged $500k penalties in 2023
04
ISO 27001 certification held by 40% of global casino operators
05
PCI DSS Level 1 compliance in 92% of payment-processing casinos
06
Cyber disclosure mandates now apply to 60% of publicly traded casinos
07
50% growth in casino cyber insurance policies from 2022-2024
08
UK Gambling Commission audits 100% of licensees for cyber risks annually
09
35% of casinos lag in NIST CSF implementation per 2024 audit
10
Ransomware negotiation banned in 15 jurisdictions for casinos
11
72% of casinos report to CISA within 72 hours post-breach as required
12
Third-party risk management regs enforced in 55% of markets
13
Projected 25% annual growth in casino cyber spending through 2028
14
90% of regulators now require cyber drills for license renewal
15
Asia-Pacific casinos face new data localization laws covering 45% of market
16
CCPA compliance fines avoided by 95% California casinos via audits
17
62% of regulators mandate AI ethics in cyber defenses for casinos
18
Cyber maturity model assessments required for 70% licenses
19
28% rise in cross-border data sharing regs for international casinos
20
SOC 2 Type II reports audited annually in 55% vendors
Interpretation
Regulations, Compliance, and Trends Interpretation
The casino industry is rapidly learning that while the house always wins, regulators and cybercriminals are now taking a much larger, and mandatory, cut of the action.
05 · Category
Vulnerabilities in Casino Systems26 stats
01
75% of casino slots use outdated Windows XP, vulnerable to exploits
02
82% of casino networks have unpatched legacy systems exposing them to ransomware
03
IoT devices in casinos, like smart locks, have 40% default credentials unchanged
04
60% of online casino apps fail basic OWASP security tests
05
Casino surveillance cameras run on insecure protocols in 55% of properties
06
45% of casino payment gateways lack proper tokenization
07
Third-party vendor breaches account for 68% of casino vulnerabilities
08
90% of casino ATMs use weak encryption standards like SSLv3
09
Slot machine networks often lack network segmentation, exposing 100% to lateral movement
10
70% of casino websites have SQL injection flaws
11
Biometric systems in casinos are vulnerable to spoofing in 35% of cases
12
50% of casino mobile apps transmit data unencrypted over WiFi
13
Loyalty program databases in casinos use unsalted hashes in 62% instances
14
78% of casino edge computing devices lack firmware updates
15
VIP room access controls bypassed via RFID cloning in 25% tested casinos
16
Cloud misconfigurations affect 40% of casino-hosted platforms
17
Multi-factor authentication bypass vulnerabilities in 48% of POS systems
18
65% of casino servers run unsupported software versions
19
Weak API security in betting platforms exposed in 52% audits
20
HVAC systems in casinos hackable for physical access in 30% cases
21
55% of casino email servers susceptible to BEC attacks
22
Unsegmented guest WiFi networks compromise 70% of casino LANs
23
42% of slot firmware contains backdoors from manufacturers
24
Database misconfigs allow unauthorized access in 58% loyalty systems
25
75% of casino VR/AR betting prototypes have prototype-level security
26
Remote desktop protocols unpatched in 38% admin consoles
Interpretation
Vulnerabilities in Casino Systems Interpretation
The casino industry appears to have decided that the house always wins, except when facing a hacker who can effortlessly exploit a sprawling buffet of antiquated systems, default passwords, and unpatched vulnerabilities left open like a high-roller's tab.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Christopher Morgan. (2026, February 13). Cybersecurity In The Casino Industry Statistics. Gitnux. https://gitnux.org/cybersecurity-in-the-casino-industry-statistics
MLA
Christopher Morgan. "Cybersecurity In The Casino Industry Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/cybersecurity-in-the-casino-industry-statistics.
Chicago
Christopher Morgan. 2026. "Cybersecurity In The Casino Industry Statistics." Gitnux. https://gitnux.org/cybersecurity-in-the-casino-industry-statistics.
Sources & references
100 datasets cited across this report · attribution is report-level