1. [News](/news) 2. Wynn Resorts Data Breach Wynn Resorts # Wynn Resorts Data Breach A data breach involving Wynn Resorts was reported in February 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team February 25, 2026 Table of Contents * [What happened in the Wynn Resorts data breach?](#what-happened-in-the-wynn-resorts-data-breach) * [Who is behind the incident?](#who-is-behind-the-incident) * [Impact and risks for Wynn Resorts customers](#impact-and-risks-for-wynn-resorts-customers) * [How to protect against similar security incidents](#how-to-protect-against-similar-security-incidents) ## Key Facts: Wynn Resorts Data Breach * Date reported February 24, 2026. * Unauthorized access identified September 2025. * Target entity Wynn Resorts (wynnresorts.com). * Source of breach ShinyHunters (extortion group). * Data types Approximately 800,000 employee records containing full names, Social Security numbers, dates of birth, email addresses, and phone numbers. * Status Confirmed; Wynn Resorts activated incident response protocols and is offering credit monitoring to affected employees. * Severity Critical; the breach involves a massive volume of highly sensitive personally identifiable information (PII) and was subject to a $1.5 million ransom demand. Protect against attacks like ShinyHunters. [See how UpGuard helps](https://www.upguard.com/product/breach-risk/threat-monitoring). ## What happened in the Wynn Resorts data breach? Wynn Resorts (wynnresorts.com) confirmed a critical security incident involving a hack by the threat actor group ShinyHunters, which was publicly reported on February 24, 2026. The breach involved the unauthorized access and theft of approximately 800,000 employee records. The incident originally occurred in September 2025 and was accompanied by a ransom demand of 22.34 Bitcoin (approximately $1.5 million). The stolen data included highly sensitive personally identifiable information (PII) such as full names, Social Security numbers, email addresses, phone numbers, and birth dates. This incident is classified as critical due to the volume of records and the sensitivity of the data categories involved. While the threat actor claims the data has been deleted following the extortion attempt, a class action lawsuit has already been filed against the company. Such incidents typically increase the risk of targeted phishing and identity theft for those affected. ## Who is behind the incident? ShinyHunters is a prolific threat actor group known for targeting high-profile organizations to steal large databases for extortion or sale on dark web forums. Active since at least 2020, the group has been linked to numerous major breaches across various industries, often focusing on cloud repositories and web applications. Their methods typically involve credential stuffing, exploiting misconfigured cloud buckets, or leveraging stolen API keys. ShinyHunters often operates by demanding a ransom in exchange for not leaking stolen data, though their reliability in following through with deletions is frequently questioned by security experts. ## Impact and risks for Wynn Resorts customers The exposure of Social Security numbers and other personal identifiers poses a significant risk of identity theft and long-term financial fraud for the 800,000 affected individuals. Malicious actors may use this information to open unauthorized accounts or conduct sophisticated phishing campaigns designed to gain further access to personal finances. Even if the data was allegedly deleted, the initial theft creates a permanent risk of credential abuse and social engineering. Impacted individuals should monitor their credit reports and remain vigilant against suspicious communications. Taking proactive steps like freezing credit and updating passwords can mitigate potential harm. Transparency from the organization remains essential to help victims respond effectively to these security threats. ## How to protect against similar security incidents Get instant alerts when your data appears on the dark web. ## Frequently asked questions ### What happened in the Wynn Resorts security breach? ShinyHunters claimed responsibility for a security attack on Wynn Resorts (wynnresorts.com) in February 2026. The incident was first reported on February 24, 2026. ### When did the Wynn Resorts breach occur? The Wynn Resorts breach was publicly reported on February 24, 2026. ShinyHunters referenced the incident around that time, but the attack originated in September 2025 via a vulnerability in the company’s Oracle PeopleSoft platform. ### What data was exposed? The breach involved over 800,000 records containing employee personally identifiable information (PII). This specifically included Social Security numbers, names, phone numbers, and dates of birth. ### Is my personal information at risk? If you are a current or former employee of Wynn Resorts, there is a high probability your personal information was affected. Similar incidents often involve sensitive identifiers like Social Security numbers. Stay alert for official notifications regarding credit monitoring services. ### How can I protect myself after this data breach? * Change your passwords immediately and use a password manager. * Enable [multi-factor authentication (MFA)](https://www.upguard.com/blog/mfa-multi-factor-authentication) on all sensitive accounts. * Monitor your financial statements and credit reports for suspicious activity. * Be wary of unsolicited emails or phone calls asking for personal information. * Use data breach monitoring tools to receive alerts if your information is leaked. ### What steps should companies take after being impacted by this breach? Wynn Resorts is expected to secure its systems, notify affected parties, and provide guidance on protective actions. Companies in this situation often review their security measures and deploy [attack surface management tools](https://www.upguard.com/product/breach-risk/attack-surface-management) to prevent future occurrences. ## How secure is Wynn Resorts? Wynn Resorts operates luxury hotel and casino properties that feature gaming facilities, hotel accommodations, dining venues, retail spaces, spas, and entertainment offerings. The company manages integrated resorts and gaming clubs across multiple international markets including the United States, Macau, and the United Kingdom. * View our free preliminary report on Wynn Resorts's security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Wynn Resorts's score View score](/security-report/wynnresorts) [https://wynnresorts.com/](/security-report/wynnresorts) ## Latest news Stay up-to-date with the latest news in cybersecurity. * ### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 20, 2026 * ### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 17, 2026 * ### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. UpGuard Team July 16, 2026 * ### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 [View all news](/news) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.