Golden Entertainment has notified customers, employees, and vendors of an incident involving unauthorised access to employee’ email accounts.
Golden Entertainment has since addressed the issue and released a notice which details the incident, the measures taken, and some of the steps to take in response.
This details: “Golden Entertainment’s investigation into an email phishing incident determined that an unauthorised individual obtained access to some employees’ email accounts.
“Golden Entertainment immediately took steps to secure the email accounts, launched an investigation, and a cybersecurity firm was engaged to assist.”
The investigation undertaken by Golden Entertainment led to the finding that access was obtained to the email accounts multiple times between 30 May 2019 and 6 October 2019.
Despite the findings in regards to the dates of access, the investigation was unable to determine either the emails or attachments that were accessed and as a result conducted a further review of the emails and attachments in the employees’ email accounts.
This further review then result in the findings that an email or an attachment contained personal information of some of Golden Entertainment’s customers, employees, and vendors – This included names, Social Security numbers, passport numbers, government ID numbers, driver’s license numbers, dates of birth, usernames, passwords, payment card numbers, expiration dates, card security codes (CVV), financial account numbers, routing numbers, health insurance information, and health or treatment information.
The statement continued: “Golden Entertainment takes the security of personal information very seriously. To date, we have no evidence that any information has been misused, but we wanted to make our customers, employees, and vendors whose information was contained in the email accounts aware of our findings.
“On November 7, 2019, we began mailing letters to individuals whose information was involved and continued to mail letters through January 31, 2020, as we found additional addresses and identified additional email accounts involved.
“Golden Entertainment has also established a dedicated call center to answer questions about this matter. If you believe your information was involved and have not received a letter by February 7, 2020, please call 1-855-946-0123, Monday through Friday, 9:00 a.m. to 6:30 p.m. Eastern Time.”
