A new legal challenge has emerged for Caesars Entertainment, alleging a second significant data breach compromised customer information just two years after a widely reported 2023 incident. The proposed class action lawsuit paints a picture of repeated security failures, leaving millions vulnerable to fraud and identity theft.
The case centers around Mark Huddleston, a long-time Caesars Rewards member who has frequented both online and physical casinos for nearly two decades. He alleges that Caesars collected extensive personal data through these interactions, data now potentially in the hands of cybercriminals.
Huddleston’s lawsuit argues that despite experiencing a major data breach in September 2023, Caesars failed to adequately bolster its security measures. This alleged negligence, he claims, directly led to another successful cyberattack in early 2026, exposing a fresh wave of sensitive customer data.
The 2026 breach reportedly compromised customer contact details and dates of birth, but the lawsuit fears the damage extends far beyond this. Based on the information stolen in the 2023 incident, plaintiffs anticipate that Social Security numbers and driver’s license numbers were also compromised this time around.
Caesars’ own privacy policy promises robust safeguards against data loss and misuse, stating the company maintains “physical, electronic and organizational safeguards” to protect customer information. Huddleston contends this promise is demonstrably false, arguing the breaches prove a critical failure in those safeguards.
The lawsuit doesn’t just focus on the immediate risk of fraud; it highlights the long-term consequences for affected customers. Stolen data can circulate for years, creating a “present and continuing risk” of identity theft and financial harm.
The proposed class action seeks to represent all individuals in the United States whose private information was compromised in the March 2026 breach. The plaintiffs are pursuing damages, comprehensive credit monitoring, identity theft protection services, and a court order mandating significant security improvements at Caesars.
This legal action against Caesars arrives amidst growing scrutiny of data security practices within the gambling industry. Similar lawsuits have recently been filed against Wynn Resorts, and a major cyberattack recently impacted the German gambling company Merkur, signaling a broader trend of vulnerability.
The core of the dispute isn’t simply about a data breach, but about a perceived betrayal of trust. Customers entrusted Caesars with their personal information, expecting it to be protected, and this lawsuit alleges that expectation was fundamentally broken – not once, but twice.
