Breaches and incidentsBriefReported by a reputable outlet, citing the company
Wynn Resorts: employee data stolen and extortion demanded
Wynn said “an unauthorized third party acquired certain employee data” and that the attacker “has stated that the stolen data has been deleted.” Secondary...
- Disclosed
What happened
- Wynn said “an unauthorized third party acquired certain employee data” and that the attacker “has stated that the stolen data has been deleted.” Secondary reports of Wynn’s Maine AG filing give 21,775 employees affected, intrusion in late 2025 targeting HR systems. ShinyHunters claimed 800,000+ records including SSNs.
- Root cause: not stated by Wynn. A ShinyHunters spokesperson told The Register it got in through an Oracle PeopleSoft vulnerability using an employee’s credentials (claim).
- ShinyHunters claimed it and demanded about $1.5 million; the listing was later removed. Wynn has not said whether it paid.
- Monitoring offered to employees; class action filed.
Sources
- https://www.bleepingcomputer.com/news/security/wynn-resorts-confirms-employee-data-breach-after-extortion-threat/
- https://www.theregister.com/2026/02/20/shinyhunters_wynn_resorts/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.