Wynn Resorts Confirms Data Breach After Hackers Remove It From Leak Site

High-end casino operator says stolen employee data has been deleted, no impact on guest experience or operations.

Published on Feb. 25, 2026

Got story updates? Submit your updates here. ›

Las Vegas-based Wynn Resorts has confirmed that hackers have stolen employee data, including personally identifiable information and Social Security numbers. The company says the unauthorized third party has stated the stolen data has been deleted and that there has been no impact on guest experience or operations.

Why it matters

Data breaches at major companies can have significant consequences, including financial losses, reputational damage, and regulatory scrutiny. This incident highlights the ongoing cybersecurity threats facing the hospitality industry and the importance of robust incident response protocols.

The details

Wynn Resorts says it immediately activated its incident response protocols and launched an investigation with the help of external cybersecurity experts after discovering the unauthorized data acquisition. The company says the stolen data has been deleted and it has not seen any evidence of the data being published or misused.

  • On February 20, 2026, the ShinyHunters hacking group claimed to have stolen more than 800,000 records containing employee data from Wynn Resorts and gave the company a deadline of February 24, 2026 to reach out before the data was leaked.
  • Wynn Resorts has since been removed from the ShinyHunters data leak website, suggesting a ransom may have been paid.

The players

Wynn Resorts

A high-end casino and hotel operator based in Las Vegas, Nevada.

ShinyHunters

A cybercrime group believed to have targeted more than 100 organizations in recent campaigns, often involving vishing and compromised SSO credentials.

Got photos? Submit your photos here. ›

What they’re saying

“We have learned that an unauthorized third party acquired certain employee data. Upon discovery, we immediately activated our incident response protocols and launched a thorough investigation with the help of external cybersecurity experts.”

— Wynn Resorts (SecurityWeek)

“The unauthorized third party has stated that the stolen data has been deleted. We are monitoring and to date have not seen any evidence that the data has been published or otherwise misused.”

— Wynn Resorts (SecurityWeek)

What’s next

Wynn Resorts says its investigation is ongoing and that it is offering credit monitoring and identity protection services to affected employees. The company also states it is taking steps to strengthen its systems to protect against future incidents.

The takeaway

This data breach highlights the ongoing cybersecurity challenges facing the hospitality industry, and the importance of having robust incident response plans in place to mitigate the impact of such attacks. Companies must remain vigilant in protecting sensitive employee and customer data, and work closely with security experts to enhance their defenses against evolving cyber threats.