Minnesota Casino Suffers Cyberattack, Hackers Persistently Target Native American Tribes in Digital Assaults
In a recent turn of events, the Jackpot Junction Casino in Morton, Minnesota, has been hit by a cyberattack. The incident, which started on March 27, 2025, has disrupted the casino's operations, triggering an emergency response and a forensic investigation.
Despite the disruptions, the casino's 379-key hotel remains open, albeit with some amenities like digital room keys temporarily suspended. The casino's online hotel room reservation system is currently unavailable. However, table games and the Circle Bar, Java, and Full Deck restaurants are operational. Bingo games, on the other hand, have been canceled until further notice.
The Lower Sioux Indian Community, the casino's operators, have confirmed the cybersecurity incident involving unauthorized access to certain systems. They are working with third-party experts to resolve the situation. The tribe has not disclosed whether a ransom for the IT systems to be restored has been demanded.
The Jackpot Junction Casino attack is not linked to the Russia-linked online hacking group RansomHub, contrary to initial reports. The group responsible for the attack is Qilin, which allegedly stole 500GB of information including client and staff data. RansomHub has taken credit for other ransomware attacks, but there is no indication that they were involved in the Jackpot Junction incident.
Cybersecurity threats continue to be a challenge for tribes, as highlighted at this week's Indian Gaming Association. The Jackpot Junction Casino incident is not an isolated case. Several tribal and commercial casinos across the country have faced similar attacks in recent years, making casinos favored targets of cybercriminals.
The Jackpot Junction Casino, which opened in 1984, is among the tribe's most critical economic components. The Lower Sioux Indian Community's economy is based on providing loans and financing through its entities Dakota Futures Inc. and Dakota Finance Corp., and is heavily invested in construction materials derived from hemp.
As of April 3, 2025, more than 1,200 slots at Jackpot Junction Casino remain unavailable. Scott Melnick, vice president of gaming security at AGS, a Las Vegas-based gaming equipment manufacturer, emphasized the importance of cybersecurity, stating, "People can be the weakest link."
The casino continues to work diligently to restore its systems and services, ensuring the safety and security of its guests and employees. Updates on the situation will be provided as more information becomes available.
[1] Source: Cybersecurity Dive, March 31, 2025.
- The Jackpot Junction Casino, operated by the Lower Sioux Indian Community, has experienced a cyberattack, causing disruptions to its operations as of March 27, 2025.
- Though the hotel's 379 rooms remain operational, certain amenities like digital room keys are temporarily suspended, and the online hotel room reservation system is currently unavailable.
- Qilin, a hacking group, is believed to be responsible for the Jackpot Junction Casino cyberattack, with reports suggesting they stole 500GB of information including client and staff data.
- The Jackpot Junction Casino cyberattack is not linked to the Russia-linked online hacking group RansomHub, contrary to initial reports.
- In light of the incident, the importance of cybersecurity in the casino-and-gambling industry has been emphasized, with casinos becoming favored targets of cybercriminals.
- The Lower Sioux Indian Community's economy, which is heavily invested in construction materials derived from hemp, is greatly impacted by the Jackpot Junction Casino closures.
- As of April 3, 2025, more than 1,200 slots at the Jackpot Junction Casino remain unavailable, according to Scott Melnick, vice president of gaming security at AGS.
- The Lower Sioux Indian Community and third-party experts are working diligently to resolve the cyberattack and restore the casino's systems and services.
- For updates on the situation, follow general news sources like Cybersecurity Dive for the latest developments on the Jackpot Junction Casino cyberattack and its impact on tribal gaming in Minnesota and across the country.
