DataBreachInformation.com
MonitoringIndiana AG filing · July 8, 2026

Bonanza Casino Reports Data Breach Affecting Indiana Patrons

Little Bonanza Inc, operating as Bonanza Casino, filed a data breach report in Indiana on July 8, 2026, regarding an incident from February 21, 2026. This breach involved the exposure of sensitive personal information such as Full Name, Social Security Number, and Financial Account Number. Individuals who received a notification should take steps to monitor their financial and personal accounts.

State
Indiana
Breach date
February 21, 2026
Reported
July 8, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Driver's License Number
  • Financial Account Number
  • Credit Card Information
  • Loyalty Program Credentials
  • Transaction and Gaming History
  • Mailing Address

Little Bonanza Inc, doing business as Bonanza Casino, formally reported a data security incident to Indiana regulators on July 8, 2026. The company stated that the breach event occurred on February 21, 2026, though the specific nature of the cyber incident was not detailed in public filings.

According to the disclosure, the exposed information includes a range of sensitive personal data. This comprises Full Name, Date of Birth, Social Security Number, Driver's License Number, Financial Account Number, Credit Card Information, Loyalty Program Credentials, Transaction and Gaming History, and Mailing Address.

The compromise of these data categories can increase the risk of identity theft and financial fraud for affected individuals. Exposed financial account numbers and government identification could be misused to open unauthorized accounts or make fraudulent transactions. Loyalty program details and transaction histories might also be leveraged for targeted scams.

Individuals who have received an official data breach notification from Bonanza Casino are advised to immediately review their credit reports, bank statements, and credit card statements for any unusual or unauthorized activity. It is prudent to consider placing a fraud alert or security freeze on your credit files with the major credit bureaus.

Furthermore, be cautious of any unsolicited communications, such as emails, texts, or phone calls, that ask for personal or financial details. Update passwords for online accounts to strong, unique combinations, and enable multi-factor authentication wherever possible to enhance security. Regularly updating security software on personal devices also contributes to a safer online environment.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Watch your financial accounts

    Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.

  • Replace exposed ID documents

    Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.

  • Secure your online accounts

    Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases