Over 21K Wynn Resorts employees affected by breach

Major luxury hotel and casino operator Wynn Resorts had information from 21,775 of its employees exfiltrated in a ShinyHunters-claimed attack, which was initially confirmed in late February, SecurityWeek reports.

All of the data stolen from Wynn's human resource systems in an October breach has already been removed by the attacker, said Wynn in a breach notification filed with the Office of the Maine Attorney General, which has raised speculations that the firm had paid the nearly $1.5 million ransom demanded by ShinyHunters. Impacted individuals have been given complimentary identity theft protection and credit monitoring services.

The disclosure follows an announcement made by the cybercrime gang ShinyHunters, claiming responsibility for the theft of over 800,000 records, including personally identifiable information and Social Security numbers. However, cybersecurity experts believe the combined group of Scattered Spider, ShinyHunters, and Lapsus$ known as Scattered Lapsus$ Hunters was responsible for the incident despite ShinyHunters' public claims.