In an era where technology is no longer optional, the gaming and casino sector has eagerly embraced the digital revolution. However, with great innovation comes great responsibility, particularly in the realm of cybersecurity. The recent cyber incidents at some of the world's leading casino and hotel chains raises fresh concerns throughout the industry about protection of enterprise and client data alike. The losses in these recent incidents is anticipated at over $115 million.

Because of the volume of both revenue and available customer data, the Gaming Industry faces a variety of challenges to their data security, including:

• Data Breaches: Protecting vast amounts of player/patron data, including personal information and financial details, from unauthorized access and breaches.
• Ransomware Attacks: Defending against ransomware attacks where hackers encrypt critical data and demand a ransom for its release, crippling operations until paid.
• Phishing and Social Engineering: Guarding against phishing emails, fraudulent websites, and social engineering tactics that manipulate employees into revealing sensitive information.
• Insider Threats: Preventing internal employees or associates from exploiting their access privileges maliciously or accidentally compromising security.
• Third-Party Vulnerabilities: Managing security risks associated with market-access partners, affiliate marketers, third-party vendors, software providers, or partners who might have access to sensitive data.
• Identity Theft: Preventing cybercriminals from stealing customer identities for fraudulent activities, which can harm both individuals and the casino's reputation.

When implementing mitigation techniques for cyber risk, consider these key elements:

• Implement robust encryption solutions to safeguard customer data in transit and at rest.
• Regularly backup critical data, store it offline and test it for recoverability to prevent or mitigate loss during ransomware attacks.
• Conduct regular employee security awareness training, including phishing attempts and social engineering tactics.
• Implement appropriate access controls and the principle of least privilege. Regularly monitor personnel activities and for unusual behavior.
• Regularly audit third-party systems for vulnerabilities.
• Review the audits and assessments performed on third-party partners with access to critical player/patron and gaming systems.
• Implement multi-factor authentication to add an extra layer of security to both internal and customer accounts.

At RubinBrown, we have a dedicated team of cyber security and IT audit professionals focused on active engagement with the organization and proactive thought leadership in cyber & IT risk management to help make a resilient IT compliance program.

For more information on cyber security risk analysis, IT health checks, vulnerability assessments and online gaming, visit RubinBrown.com. 

Published: 10/31/2023

_{^{Readers should not act upon information presented without individual professional consultation.}}

_{^{Any federal tax advice contained in this communication (including any attachments): (i) is intended for your use only; (ii) is based on the accuracy and completeness of the facts you have provided us; and (iii) may not be relied upon to avoid penalties.}}