Turning Stone Casinos Implement Cash-Only Policy at Three Upstate New York Tribal Properties After Cybersecurity Incident

Turning Stone Resort Casino and two affiliated tribal gaming properties in upstate New York are restricting all transactions to cash only after a cybersecurity incident disrupted network and communications systems. Parent company Turning Stone Enterprises, the commercial arm of the Oneida Indian Nation, shut down selected internal systems as a precaution. The action affects credit cards, ATMs, sports betting, bingo operations, and the TS Rewards loyalty program across Turning Stone Resort Casino in Verona, Point Place Casino in Bridgeport, and YBR Casino & Sports Book in Chittenango. Related businesses including The Lake House at Sylvan Beach and Maple Leaf Markets convenience stores follow the same cash-only rules.

The company has not identified the incident's cause or any third-party responsibility. Shutdowns were enacted to protect guests' personal information during the probe by cybersecurity specialists. As first reported by Casino.org News, the company found no evidence that confidential information had been accessed. The investigation remains ongoing.

Operational Limits and Response Measures

A company statement noted its team was "working at full speed with cybersecurity experts to return to full working order" without offering a timeline for restoration. Evening updates on service availability will be issued until systems recover. The loyalty program that supports points for gambling, hotel stays, dining, and other purchases is fully offline.

Persistent Cyber Threats to Tribal Gaming Operations

Casinos have faced multiple high-profile cybersecurity breaches in recent years, including ransomware that disrupts operations and exposes customer data. Tribal casinos may be viewed as attractive targets because attackers perceive them as having weaker cybersecurity systems and fewer resources to counter sophisticated threats, according to the FBI. Operators manage substantial financial transactions and interconnected systems that prove costly to take offline.

In September 2023, MGM Resorts International suffered a cyberattack that disrupted hotel reservations, casino transactions, and other services across its US properties. The company estimated the impact on its third-quarter earnings at approximately $100 million. This latest event at Turning Stone properties demonstrates how quickly such incidents can force revenue-limiting measures. Tribal gaming operators and regulators should treat these events as signals to audit and upgrade defenses before similar disruptions occur at scale.