2025-09-23 BOYD GAMING CORP Cybersecurity Incident

Page last updated on September 23, 2025

BOYD GAMING CORP initially disclosed a cybersecurity incident in an SEC 8-K filing on 2025-09-23 17:00:18 EDT.

Company Summary

Boyd Gaming Corporation is a U.S. gaming and hospitality company that owns and operates casinos, hotels, and entertainment properties across several states.

Incident Details

Material: No
Is Breach: Yes
Records Compromised: Unknown
Data Types Impacted: Unspecified

Compromised Date: Unknown
Detected Date: Unknown
Disclosure Date: 2025-09-23
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Theft
Attack Tactics¹: TA0010
Attack Techniques¹: No Attack Techniques Tracked (yet)

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2025-09-23

BOYD GAMING CORP filed an 8-K at 2025-09-23 17:00:18 EDT
Accession Number: 0001193125-25-213546

Item 7.01 Regulation FD Disclosure.

Boyd Gaming Corporation (the “Company”) recently experienced a cybersecurity incident in which an unauthorized third party accessed our internal IT system. The cybersecurity incident has had no impact on the Company’s properties or business operations.

Upon detecting the incident, the Company promptly took steps to respond to the incident with the assistance of leading external cybersecurity experts and in cooperation with federal law enforcement authorities. The Company has determined that the unauthorized third party removed certain data from the Company’s IT systems, including information about employees and a limited number of other individuals. The Company is notifying impacted individuals and has or will notify its various regulators and other governmental agencies as required.

As of the date of this filing, the Company believes that the incident will not have a material adverse effect on the Company’s financial condition or results of operations. The Company maintains a comprehensive cybersecurity insurance policy, which we expect will cover costs associated with incident response and forensic investigations, as well as business interruptions, legal actions and regulatory fines, if any, subject to policy limits and deductibles.

The information included in Item 7.01 of this Current Report on Form 8-K is being furnished and shall not be deemed “filed” for purposes of Section 18 of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), or otherwise subject to the liabilities of that section, nor shall it be deemed incorporated by reference into any other filing under the Securities Act of 1933, as amended, or the Exchange Act, regardless of any general incorporation language in any such filing.

Company Information