Pennsylvania Federal Court Allows Negligence Claim to Advance in Class Action Against Rivers Casino Philadelphia
TL;DR — Judge Joshua D. Wolson allowed the negligence claim in a class action against Rivers Casino Philadelphia to proceed after a January cyberattack exposed names, Social Security numbers and bank details. Plaintiffs cited increased fraudulent activity. The court dismissed breach of contract and other claims for lack of grounds. (48 words)
SCCG Take — The ruling establishes that reported fraud attempts can substantiate negligence in casino data breaches, sharpening focus on demonstrable safeguards for operators. (22 words)
A federal judge has ruled that Rivers Casino Philadelphia must face a class action lawsuit alleging negligence in connection with a January cyberattack. Judge Joshua D. Wolson of the US District Court for the Eastern District of Pennsylvania found that the operator owed a duty to exercise reasonable care in protecting customer data and that plaintiffs had plausibly alleged a failure to meet that duty.
The cyberattack allowed an unauthorized party to access files containing names, Social Security numbers and bank account details. Customers reported an increase in attempted fraudulent activity after the incident. Rivers Casino notified potentially affected individuals following the breach, yet the plaintiffs maintain that the full scope was not disclosed.
The suit contends that inadequate safeguards may have violated consumer protection and privacy laws. Levi & Korsinsky, LLP is organizing the class action and has invited affected customers to participate without paying legal fees upfront.
Court’s Reasoning and Partial Dismissal
Wolson cited the reports of increased fraudulent activity as support for the plausibility of the negligence claim. The court denied the operator’s motion to dismiss that claim. However, the judge dismissed the accompanying allegations of breach of contract, unjust enrichment, invasion of privacy and breach of confidence, determining that the plaintiffs had not provided sufficient grounds for those counts.
The ruling narrows the case to the question of reasonable care in data protection. This development was reported by Focus Gaming News.
Where the Risk Lies
The decision directs attention to the evidentiary weight courts may place on post-breach fraud reports when assessing operator diligence. Gaming licensees facing similar incidents now have a clearer marker for how negligence claims can survive initial challenges based on the specific facts alleged here.
Reporting: Focus Gaming News
Generated by SCCG’s automated editorial system from published source reporting. SCCG Management holds editorial responsibility.
Fraud reports now carry evidentiary weight in negligence cases — operators need demonstrable safeguards before the breach, not excuses after.
We've navigated 30-plus years of regulatory and operational risk with 545 partners. This ruling turns post-breach fraud attempts into courtroom ammunition, raising the bar on what 'reasonable care' looks like. Operators can't coast on compliance checklists anymore — demonstrable diligence is the new standard.
- Judge allowed negligence claim citing increased fraud reports after January cyberattack
- Breach exposed names, Social Security numbers, and bank account details
- Court dismissed breach of contract, unjust enrichment, and privacy invasion claims
SCCG angle: SCCG connects operators to best-in-class cybersecurity providers and compliance advisors who build the kind of demonstrable safeguards courts now expect. Our network includes incident response specialists who've worked every regulated market — we help you stay ahead of the liability curve, not behind it.
Gaming, betting and prediction markets — the desk’s read, every weekday.
Subscribe →