Olympia Gaming
Olympia Gaming cyberattack disrupts Nevada casino services
Summary
A June 2024 cyberattack disrupted Olympia Gaming’s northern Nevada operations, including rewards and payment services at Legends Bay Casino. Casino Fandango later confirmed unauthorized access and copying of files. The casinos’ exact full-restoration date is unverified.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
DD-CIT assessment
The organization publicly identifies the event as cyber-related. The organization publicly documents the resulting service disruption.
Attack mechanisms
-
Unauthorized access
Unauthorized access to systems, accounts, networks, or data.
Data impacts
-
Unauthorized data access
An unauthorized party accessed or viewed data without evidence that the data was copied, removed, altered, or publicly disclosed.
-
Data theft or exfiltration
Data was copied, transferred, downloaded, or otherwise removed from the affected environment by an unauthorized party.
-
Data unavailable
Authorized users could not access required data because of the incident, even when the data was not encrypted, deleted, or destroyed.
Operational impacts
-
Partial service outage
A service, system, platform, or operational capability remained available only in part or with significant limitations.
-
Online portal unavailable
A public, customer, employee, student, patient, vendor, or partner portal was unavailable or materially impaired.
-
Internal systems unavailable
Internal business, administrative, operational, or staff-facing systems were unavailable.
-
Payment processing disruption
The organization could not process, receive, issue, reconcile, or record payments normally.
-
Transaction processing disruption
Business, financial, customer, administrative, or operational transactions could not be completed normally.
-
Records processing disruption
The organization could not create, update, search, file, approve, transmit, or otherwise process records normally.
-
Service delay
Services continued but with longer processing, response, delivery, or completion times.
-
Manual workaround required
Staff or users had to rely on paper, telephone, in-person, offline, or other manual processes.
-
Alternate service channel required
The organization redirected users to a different website, office, telephone number, email address, provider, or service channel.
-
Staff unable to work normally
Employees or contractors were unable to perform normal duties because systems, data, facilities, or communications were unavailable.
-
Customer or public access restricted
Customers, residents, patients, students, vendors, or members of the public faced access restrictions or could not use services normally.
Extortion indicators
-
No known extortion indicator
Available evidence indicates that no extortion demand, threat, communication, or related pressure tactic was identified.
Incident narrative
Analyst assessment
A June 2024 cyberattack disrupted systems used by Olympia Gaming’s northern Nevada casinos. The operator confirmed the incident to local reporters on June 19, saying it had secured systems and engaged outside cybersecurity specialists. Affected properties included Legends Bay Casino in Sparks and Casino Fandango in Carson City.
The later Casino Fandango notice confirms unauthorized access and copying between June 8 and June 13. That window is distinct from the June 12 problems described by employees and the company’s June 19 public acknowledgment.
Operational significance
CDC Gaming’s June 20 on-site report documented limitations at Legends Bay while the casino remained open. Staff paid jackpots and cash-outs in person with cash. Rewards enrollment, card printing, points tracking, voucher redemption and promotions were disrupted. Restaurants accepted cash, ATMs were unavailable and rewards-account login failed, although the main website mostly worked. The Circa Sportsbook was unaffected.
We reported that line dancing at Legends Bay was postponed, drawing on contemporary Casino.org coverage. These were partial operational effects and workarounds. CDC’s suggestion that Fandango likely had identical system problems was not an independently observed inventory of Fandango outages.
In later reporting, Nevada Gaming Control Board analyst Michael Lawton said the attack adversely affected the Sparks casino market. The report described year-over-year market revenue declines of 12% in June and 11% in July. Those marketwide figures do not quantify Olympia’s losses or establish how much of the decline the attack caused.
A July 11 Legends Bay promotion described earning rewards points again. This supports a limited sign of routine functionality, rather than a complete restoration date. The historical incident is presumed resolved, with the exact end of all material effects unknown.
Confidence and uncertainty
Confidence is high in cyber involvement, the documented Legends Bay effects and Fandango’s confirmed file copying because company communications and direct observations support those findings. Confidence is more limited in the precise distribution of operational effects between the two properties.
An early company belief that personal or sensitive information had not been disclosed was provisional. Fandango’s subsequent notice confirms copying, while leaving individualized data elements blank in its template. Its statement that there was no evidence of misuse does not establish that no information was taken.
The company notified federal law enforcement. A Nov. 20, 2025 court order granted final approval of the related Fandango settlement. The settlement agreement says notification letters began around Sept. 23, 2024. Its benefits include up to $2,000 for documented, unreimbursed losses and one year of credit monitoring for eligible claimants. Approval does not establish that those benefits were paid, and the settlement is not an admission of liability or proof of ransom payment.
Analytic gaps
The public evidence does not establish ransomware, a named attacker, encryption, a ransom demand or payment. It does not resolve the precise first-access time, every affected data category or the final recovery date. Later notifications and litigation do not establish continuous casino-system downtime. Separate attacks affecting MGM, Caesars and Swinomish are distinct events.
Organizations involved
Casino Fandango
Legends Bay Casino
Locations
Primary locations
Organization type
Critical infrastructure
Impacted locations
Carson City, Nevada
Carson City contains affected Casino Fandango at 3800 S. Carson St. The consolidated city is also the county-equivalent. Fandango confirmed system access and file copying; Legends Bay’s detailed service-outage inventory does not establish identical effects here.
Clark County, Nevada
Clark County contains affected operator Olympia Gaming’s corporate office on Southern Highlands Parkway. Its Las Vegas mailing address is in Enterprise, outside the incorporated city. This is an organization physical anchor, separate from the northern Nevada casino service effects and not proof of a countywide outage or county-government compromise.
Sparks, Nevada
Sparks contains affected Legends Bay Casino at 100 Legends Bay Drive. On-site reporting documents partial gaming-service and dining-payment effects while the property remained open. This physical anchor does not mean Sparks city government or every business in the city was compromised.
Washoe County, Nevada
Washoe County contains the affected Legends Bay Casino property in Sparks. Casino service limitations are specific to the affected organization; this county-level physical anchor does not establish a countywide outage or county-government intrusion.
Sources
We reported, citing Casino.org, that Olympia’s casino operations were disrupted and line dancing at Legends Bay was postponed.
Local TV report citing Olympia Gaming’s statement confirming its casino operations were hacked, stating it secured systems and initiated an investigation with cybersecurity specialists, and naming Casino Fandango and Legends Bay as subsidiaries.
Local Reno CBS affiliate report confirming disruption to some gaming systems and summarizing Olympia Gaming’s immediate actions (securing systems and engaging national cybersecurity specialists) and its stated priority to return to normal operations.
Local outlet report describing a cyberattack impacting certain systems, noting Olympia Gaming’s investigation with national external cybersecurity specialists and its focus on returning to normal operations; includes an update timestamp on June 20, 2024.
The report describes postponed Legends Bay line dancing and the company’s use of outside cybersecurity specialists to investigate the attack.
Trade press with on-site reporting at Legends Bay documenting specific operational impacts (rewards enrollment/printing, points tracking, voucher redemption, promotions, cash-only dining, ATM issues) and stating there was no timeline for full restoration at the time.
Legends Bay promotes earning base rewards points for an offer in a July 11, 2024, post.
Nevada Gaming Control Board analyst Michael Lawton said Olympia’s cyberattack adversely affected the Sparks casino market. The report described marketwide revenue declines of 12% in June and 11% in July compared with the prior year.
The federal dataset identifies Nevada’s incorporated places and census-designated places, including Sparks, Carson City, Las Vegas and Enterprise.
The federal dataset identifies Clark County, Washoe County and the Carson City county-equivalent in Nevada.
Legends Bay describes its 2022 opening, gaming, dining and rewards services at 100 Legends Bay Drive in Sparks.
Casino Fandango lists its address as 3800 S. Carson St., Carson City, Nevada.
Casino Fandango describes its games, restaurants, rewards program, ballroom, meeting facilities and Galaxy theater, with lodging nearby.
The city describes Sparks in the Truckee Meadows east of Reno, near the Sierra Nevada, and identifies Sparks Marina’s 80 acres of water.
Olympia Companies identifies Olympia Gaming as its gaming development division, formed in 2005, and as operator of Casino Fandango and Legends Bay.
The historical marker describes Southern Pacific’s 1904 move from Wadsworth, Sparks’ incorporation in 1905 and its naming for Nevada Gov. John Sparks.
Breach notification letter stating the company identified a cybersecurity event in June 2024 and determined an unauthorized actor accessed certain systems and copied some information between June 8, 2024 and June 13, 2024; states federal law enforcement was notified and credit monitoring was offered.
The court’s Nov. 20, 2025, order grants final approval of the Fandango settlement and dismisses the case, with nonadmission language.
The agreement says breach notification letters began around Sept. 23, 2024. Benefits include up to $2,000 for documented, unreimbursed losses and one year of credit monitoring, subject to the settlement’s requirements.
See something that needs correction?
Signed-in members can report an error, update, or missing source.