In an era where technology is no longer optional, the gaming and casino sector has eagerly embraced the digital revolution. However, with great innovation comes great responsibility, particularly in the realm of cybersecurity. Recent cyber incidents at some of the world's leading casino and hotel chains raise fresh concerns throughout the industry about the protection of enterprise and client data alike.

This highlights why an industry expert’s consulting services can help mitigate these cyber challenges in the future and prevent further losses. In fact, total losses from these recent incidents are anticipated to exceed $115 million.

Because of the volume of both revenue and available customer data, the Gaming Industry faces a variety of challenges to their data security, including:

• Data Breaches: Protecting vast amounts of player/patron data, including personal information and financial details, from unauthorized access and breaches.
• Ransomware Attacks: Defending against ransomware attacks where hackers encrypt critical data and demand a ransom for its release, crippling operations until paid.
• Phishing and Social Engineering: Guarding against phishing emails, fraudulent websites, and social engineering tactics that manipulate employees into revealing sensitive information.
• Insider Threats: Preventing internal employees or associates from exploiting their access privileges maliciously or accidentally compromising security.
• Third-Party Vulnerabilities: Managing security risks associated with market-access partners, affiliate marketers, third-party vendors, software providers, or partners who might have access to sensitive data.
• Identity Theft: Preventing cybercriminals from stealing customer identities for fraudulent activities, which can harm both individuals and the casino's reputation.

When implementing mitigation techniques for cyber risk, consider these key elements:

• Implement robust encryption solutions to safeguard customer data in transit and at rest.
• Regularly backup critical data, store it offline and test it for recoverability to prevent or mitigate loss during ransomware attacks.
• Conduct regular employee security awareness training, including phishing attempts and social engineering tactics.
• Implement appropriate access controls and the principle of least privilege. Regularly monitor personnel activities and for unusual behavior.
• Regularly audit third-party systems for vulnerabilities.
• Review the audits and assessments performed on third-party partners with access to critical player/patron and gaming systems.
• Implement multi-factor authentication to add an extra layer of security to both internal and customer accounts.

At RubinBrown, we have dedicated cybersecurity and IT audit services focused on active engagement with the organization and proactive thought leadership in cybersecurity and IT risk management to help build a resilient IT compliance program.

Published: 10/31/2023

_{^{Readers should not act upon information presented without individual professional consultation.}}

_{^{Any federal tax advice contained in this communication (including any attachments): (i) is intended for your use only; (ii) is based on the accuracy and completeness of the facts you have provided us; and (iii) may not be relied upon to avoid penalties.}}