International Game Technology
International Game Technology cyberattack
Summary
Unauthorized access detected Nov. 17, 2024, disrupted IGT’s internal systems and prompted protective shutdowns and continuity workarounds. Later IGT/Brightstar notices confirmed personal-information exposure; no exact recovery date was established.
Key facts
Timeline
-
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
Incident characteristics
Assessments
Attack mechanisms
-
Unauthorized access
Unauthorized access to systems, accounts, networks, or data.
Data impacts
-
Unauthorized data access
An unauthorized party accessed or viewed data without evidence that the data was copied, removed, altered, or publicly disclosed.
Operational impacts
-
Partial service outage
A service, system, platform, or operational capability remained available only in part or with significant limitations.
-
Internal systems unavailable
Internal business, administrative, operational, or staff-facing systems were unavailable.
-
Application unavailable
A specific application or software platform became unavailable or unusable.
-
Alternate service channel required
The organization redirected users to a different website, office, telephone number, email address, provider, or service channel.
-
Staff unable to work normally
Employees or contractors were unable to perform normal duties because systems, data, facilities, or communications were unavailable.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Internal systems and services disrupted
International Game Technology PLC said it detected unauthorized access to certain systems Nov. 17, 2024. Its Nov. 19 securities filing confirmed disruption to portions of its internal information technology systems and applications.
The company took some systems offline, brought in outside advisers and used business-continuity alternatives where possible. A Nov. 22 company statement reported by the Las Vegas Review-Journal said specific processes and services remained temporarily suspended.
At that time, the company reported no indication that customer- or player-facing lottery and gaming systems were affected. The reviewed disclosures do not establish specific outages at its Las Vegas or Providence offices, a casino closure or interrupted lottery play.
Personal information involved
A company letter dated Oct. 3, 2025, to Rhode Island’s attorney general linked the Nov. 17 incident to personal information concerning 6,354 Rhode Island residents. It said a detailed review of data across multiple servers and jurisdictions was completed Aug. 21, 2025. The letter bears an Oct. 8 receipt stamp.
The consumer notice filed with Washington authorities said involved information could include names, contact details, birthdates, government identification, Social Security or other tax identifiers, financial account information and health data. The categories varied; the notice does not establish that every category applied to every person. It reported no known misuse at that time and offered 24 months of identity monitoring.
Rhode Island Current reported Oct. 8 that 103,879 people were affected overall. A company spokesperson said most were current or former employees. The original Rhode Island letter specifies the state’s count.
A Connecticut regulator’s Sept. 23 alert reported nearly 550 residents notified and said Connecticut Lottery systems and operations were unaffected. That alert does not specify the intrusion date.
Company separation and continuing assessment
The Rhode Island letter explains that Brightstar Global Solutions Corporation operated as a unified business with portions of IGT before their July 1, 2025, separation. The later names do not make these notifications a separate operational outage.
Brightstar Lottery PLC’s 2025 annual report, dated Feb. 24, 2026, refers to the previously disclosed November 2024 incident and reports no cybersecurity incident with a material or reasonably likely material effect. That financial assessment does not negate the documented disruption or data exposure.
Current assessment
The incident is presumed resolved. The last directly verified operational restrictions were described Nov. 22, 2024; an exact end to all disruption was not established. Later data review, notifications and financial reporting do not extend the outage. The reviewed evidence does not establish ransomware, a responsible threat actor, a ransom payment or confirmed data exfiltration for this incident.
Organizations involved
Brightstar Global Solutions Corporation
Location
Organization type
Critical infrastructure
Impacted locations
Clark County, Nevada
IGT’s incident-period SEC property table identifies its U.S. principal operating facility at 6355 S. Buffalo Drive, Las Vegas, NV 89113. An exact Census street-address match places the office in Spring Valley CDP (3268585), unincorporated Clark County (32003), with no incorporated-place match. Clark County’s official planning page confirms that Spring Valley is unincorporated and county-administered. Use the existing county as the supported physical-site fallback because no canonical Spring Valley record exists; do not create a facility or mislabel the office as inside incorporated Las Vegas. The site anchors the affected business and does not establish a building-specific outage.
Providence, Rhode Island
The Rhode Island corporation registry identifies Brightstar Global Solutions Corporation’s principal office at 10 Memorial Boulevard, Providence, RI 02903; the incident-period SEC property table also identifies this address as an administrative office and lottery regional headquarters. Exact Census match confirms Providence city4459000 and Providence County44007. This is the affected entity’s supported physical anchor; neither the office address nor residents’ exposed data proves a Providence building outage.
Sources
The material-properties table identifies 6355 S. Buffalo Drive as a U.S. principal operating facility and 10 Memorial Boulevard, Providence, as an administrative office and lottery regional headquarters.
The company detected unauthorized system access Nov. 17, 2024, and experienced disruption to portions of its internal IT systems and applications. It took some systems offline and implemented continuity alternatives.
The Ghost article driving this backfill describes internal-system shutdowns and continuity alternatives after unauthorized access was detected Nov. 17, 2024.
A company representative said specific processes and services were temporarily suspended, with continuity alternatives. No indication of affected customer- or player-facing lottery and gaming systems had been found at that time.
The company announced its lottery business’s Brightstar name and explained that the gaming buyer would retain IGT and International Game Technology names following the transaction.
Brightstar had notified nearly 550 Connecticut residents, mostly employees. The regulator said corporate systems were affected and Connecticut Lottery systems and operations were not involved or impacted.
The regulator entry reports 1,796 Washington residents affected and lists identity, financial and medical information categories. It links the companies’ consumer notification.
The consumer notice links Nov. 17, 2024, discovery to personal information potentially including identity, financial and health data, with review completed Aug. 21, 2025. It offered 24 months of identity monitoring and reported no known misuse at that time.
The company identified 6,354 affected Rhode Island residents, Nov. 17, 2024, discovery and Aug. 21, 2025, completion of personal-data review. It explained its unified business with portions of IGT before July 2025.
Reporting identifies 103,879 people affected overall, including 6,354 Rhode Islanders. A named company spokesperson said most affected people were current or former employees.
The annual report discusses the previously disclosed November 2024 incident and says no cybersecurity incident materially affected or was reasonably likely to materially affect the company. It describes the July 2025 name change and gaming business sale.
The record identifies a Delaware corporation with principal office at 10 Memorial Boulevard, Providence. It records the prior names IGT Global Solutions Corporation and GTECH Corporation.
The subsidiary table lists Brightstar Global Solutions Corporation as wholly owned by Brightstar Lottery S.p.A., which is owned by Brightstar Lottery Holdings B.V. The latter is owned by Brightstar Lottery PLC.
See something that needs correction?
Signed-in members can report an error, update, or missing source.