OYO Hotel & Casino Cyberattack Revealed Months After Incident
Cyberattack on OYO Hotel & Casino Uncovered After Several Months
Recent reports have revealed that the OYO Hotel & Casino was targeted in a cyberattack earlier this year, although the news has only surfaced now. This incident involved unauthorized access to the property’s data systems, resulting in a significant data breach.
Data Breach Affected Thousands and Triggered Legal Disputes
It has been reported that personal information of approximately 4,700 guests along with casino and hotel employees was compromised during the breach. The revelation emerged amidst a legal dispute between OYO Hotels and Highgate Hotels, a management firm previously under contract with the property.
OYO Hotels abruptly terminated their agreement with Highgate, citing inadequate IT security measures that may have facilitated the breach. In response, Highgate filed a lawsuit alleging violations of New York Labor Law Section 860-a, escalating the situation further.
Complications arose as OYO was not alerted to the cyberattack until six weeks after ending the contract. The breach itself took place in January 2025, but notification to OYO only occurred on September 18, 2025.
The compromised data included sensitive internal financial records, personal and financial details of patrons, and proprietary documentation. OYO joins a growing list of Las Vegas hospitality companies, such as MGM Resorts International and Caesars, that have fallen victim to similar cyberattacks.
Wider Cybersecurity Issues in Las Vegas Hospitality Industry
In a related development, a teenager was indicted in Las Vegas for involvement in cyberattacks targeting major hotel and casino companies in the region. Though specific mentions of MGM and Caesars were omitted, it is believed the teenager aided an international criminal network in executing these crimes.
Meanwhile, OYO Hotel & Casino is reportedly considering closing its live dealer table game section to focus more on slots and electronic gaming tables. This strategic shift aims to increase automation and reduce operational costs associated with live gaming.
