Golden Entertainment has notified individuals of a network malware infection that could affect the privacy of some personal information.
Although the company has no evidence of actual or attempted misuse of information, the notice provides details about the incident, Golden’s response, and resources available to help protect information.
In late January, the company discovered that certain portions of its network were infected with malware. With this, it took steps to secure the network and, with the assistance of computer forensic specialists, conducted an investigation to determine the nature and scope of the event, including any risk to data.
The investigation confirmed that an unauthorised figure gained access to a portion of the network and encrypted network files around January 24, 2021. Furthermore, the investigation also determined that the unauthorised figure acquired certain documents before the encryption occurred.
Given that network locations were accessed without authorisation, Golden undertook a “lengthy and time-intensive thorough review of the potentially impacted information in order to identify the information that was potentially impacted and to whom it related.”
This review was completed around August 25, 2021, at which time the group confirmed the individuals whose information was present. The company then worked to reconcile the results of the review with internal records in order to provide notification to potentially impacted individuals as quickly as possible.
While the impacted information varied by individual, the investigation determined that the information affected included: individual name, date of birth, social security number, driver’s licence or state identification number, financial account information, debit or credit numbers, and medical treatment or diagnosis information.
Stating in its notice that it “takes this incident and the security of personal information very seriously”, upon discovering the activity, the company “conducted a comprehensive investigation of the event to confirm its nature and scope”.
Moreover, Golden “also notified law enforcement of the event and notified regulatory authorities”, as required by law.
Additionally, on September 24, 2021, Golden Entertainment began mailing written notice to potentially impacted individuals.
As an added precaution, the group has offered impacted individuals with access to credit monitoring and identity theft protection services through Kroll – provider of services and digital products related to valuation, governance, risk and transparency – at no cost as an added precaution.
Finally, the company encouraged individuals “to remain vigilant against incidents of identity theft and fraud by reviewing account statements and monitoring free credit reports for suspicious activity and reporting any such activity to law enforcement.”
They added: “Individuals can also enroll to receive the complimentary credit monitoring services offered within the letter.”