PokerGO LLC
PokerGO denial-of-service incident
Summary
PokerGO’s July 15, 2025 World Series of Poker final-table coverage was disrupted in an incident reported as a DDoS attack. The company redirected viewers to YouTube, and reporting the following day said its streaming platform had been restored.
Key facts
Timeline
-
Incident start:
?
Earliest known or assessed start of malicious activity or incident activity. -
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted location
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Distributed denial of service (DDoS)
Intentional disruption of services through overwhelming network traffic.
Data impacts
-
Unknown data impact
The incident is cyber-related, but available evidence does not establish whether or how data was affected.
Operational impacts
-
Website unavailable
A public-facing website was unavailable, disabled, or inaccessible.
-
Alternate service channel required
The organization redirected users to a different website, office, telephone number, email address, provider, or service channel.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
PokerGO experienced a cyber-related interruption to its World Series of Poker Main Event final-table coverage on July 15, 2025. Card Player’s account identifies a distributed denial-of-service attack and says PokerGO commentators acknowledged attacks on air. The company’s own written notice confirms website difficulties and directs viewers to YouTube, without specifying the cause.
Operational significance
The incident prevented normal access to a paid live broadcast at a time when viewers could not simply defer watching without missing tournament action. PokerGO used its free YouTube channel as an alternate delivery route. Card Player reports that coverage there also encountered early interruptions before continuing and that PokerGO subsequently restored its platform.
The interruptions should not be treated as one precisely measured attack outage. RakeRace distinguishes the platform’s apparent DDoS problems from a later local internet outage at Horseshoe affecting the YouTube feed. Our July 16 report described an approximately 20-minute blackout and continued in-person play; the precise duration attributable to the cyberattack remains uncertain.
Confidence and uncertainty
Confidence is high that malicious activity disrupted streaming, based on reporting of the attack and the affected broadcaster’s on-air acknowledgement, alongside its directly verified service notice. DDoS is the supported reported mechanism. No responsible actor, ransomware deployment, data theft or extortion demand is established by the reviewed evidence.
Service is assessed as resolved because Card Player reported restoration by July 16. The precise restoration timestamp is unknown. The outage affected access to broadcast coverage; evidence does not establish that tournament systems, players’ balances or casino gaming operations were compromised.
Analytic gaps
The public record does not establish attack traffic volume, infrastructure targeted, duration of each interruption, mitigation measures, financial loss or a responsible group. Our report’s assertion of federal-investigator involvement lacks independent corroboration in the sources reviewed here.
The directly verified July 15 written notice discloses disruption only. Cyber disclosure on that date rests on Card Player’s report of the commentators’ on-air statements; the broadcast segment has not been independently replayed. Later reporting or an authoritative technical account could refine the mechanism and timing.
Organizations involved
Impacted location
Clark County, Nevada
The affected coverage originated at Horseshoe in unincorporated Paradise, Clark County. The existing county record locates the event site without claiming a countywide outage or placing the property within the City of Las Vegas.
Sources
Our July 16 reporting describes a July 15 cyberattack disrupting PokerGO’s World Series of Poker final-table stream and says coverage resumed. It reports an approximately 20-minute blackout and continued in-person play.
PokerGO acknowledged technical difficulties on its website, directed viewers to its YouTube channel for the Main Event final table, and apologized for the inconvenience.
The report distinguishes apparent DDoS problems at the PokerGO website and app from a subsequent local internet interruption at Horseshoe that also stopped the YouTube feed. It describes free YouTube coverage resuming after the interruption.
The report identifies a DDoS attack affecting PokerGO’s final-table coverage, a move to free YouTube viewing, additional early interruptions and later restoration of the paid platform. It says PokerGO commentators referred to the attacks on air.
See something that needs correction?
Signed-in members can report an error, update, or missing source.