Boyd Gaming Corporation has notified individuals that it discovered unauthorized removal of information from its computer systems. The company says it became aware of the incident on September 6, 2025, and that its investigation traced the unauthorized activity to a window between September 5 and September 7, 2025. This falls into the category of hacking or system intrusion, and Boyd Gaming says it worked with outside cybersecurity experts and federal law enforcement to shut down the unauthorized access and secure its environment.
The letter is a template notice, and the copy of it that regulators received does not spell out every category of personal data involved for each recipient — it confirms that names were included and references additional data elements as a variable field without listing them out. At least 16 Rhode Island residents were affected, according to a state-specific disclosure in the letter, though the notice does not state a total number affected across all states.
What information was exposed?
- Name
- Other personal information categories, as referenced in the notice but not specified in the version of the letter available to us — if you received this letter, check the personalized version mailed to you for the exact data elements listed
As a precaution, Boyd Gaming is offering two years of complimentary credit monitoring, dark web monitoring, and identity recovery services through IDX. To enroll, visit https://response.idx.us/2025cyberincident or call 1-833-353-7300 using the unique enrollment code printed in your individual letter; you have 90 days from the date of the letter to activate, and the stated enrollment deadline is December 24, 2025.
What should you do now?
- Enroll in the free IDX credit monitoring and identity recovery service before the December 24, 2025 deadline, since it costs you nothing and can catch misuse early.
- Review your bank and credit card statements regularly for any charges or accounts you don’t recognize.
- Consider placing a fraud alert or a security freeze on your credit files with Equifax, Experian, and TransUnion, especially if you’re unsure exactly what data of yours was involved.
- Request your free annual credit reports at www.AnnualCreditReport.com and look for accounts opened in your name.
- Because the exact data elements involved aren’t fully detailed in the letter text we reviewed, treat any unexpected calls, emails, or account activity with extra caution.
- For ongoing peace of mind, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere.
- If you spot signs of fraud, report it right away to your financial institution and to the FTC at www.ftc.gov/idtheft or (877) 438-4338.
If you have questions, Boyd Gaming can be reached at 1-833-353-7300, or by mail at P.O. Box 989728, West Sacramento, CA 95798-9728.