2025 OYO Hotel & Casino Las Vegas — January intrusion; ~4.7k individuals in regulatory/gaming coverage
Data compromised
Guest, workforce, and partner PII categories described in Nevada-oriented breach summaries
Technical writeup
Public records and Las Vegas press described a January 2025 cyberattack against the off-Strip OYO Hotel & Casino Las Vegas property tied in reporting to LockBit-era criminal marketing, with subsequent substitute notices and gaming-regulator narratives estimating personal information exposure on the order of thousands of guests, employees, and business contacts. Coverage highlighted operational and legal friction between brand, operator, and hotel-management vendors when notifications peaked in late 2025.
Root cause
Criminal intrusion into property hospitality systems (specific chain attributed in local and trade press)