







Running Aces Casino, Hotel & Racetrack, an entertainment destination in Columbus, Minnesota, recently experienced a significant data breach involving sensitive customer information. The incident was first discovered on Aug. 14, 2025, and was later disclosed in a notice to the Idaho Attorney General on Nov. 24, 2025.
The breach was allegedly carried out through a ransomware attack attributed to the Qilin group, a known cybercriminal organization. Qilin claimed responsibility for the attack and posted sample screenshots of the stolen data on their dark web portal on Sept. 8, 2025, indicating that the compromised information may have been exposed to malicious actors.
According to the notice, the breach involved the unauthorized access and exfiltration of personally identifiable information (PII) including names, Social Security numbers, dates of birth, and driver’s license numbers. So far, the cybersecurity incident has impacted at least five residents in Idaho. However, this is an ongoing investigation and the number of affected individuals is subject to change.
The breach’s severity is heightened by the nature of the data stolen, as Social Security numbers and driver’s license numbers can be used for identity theft and other forms of fraud.
In response to the ransomware attack, Running Aces Casino initiated an internal investigation and worked with cybersecurity professionals to contain and remediate the incident. The company notified affected individuals on Nov. 24, 2025.
If you believe your personal information may have been compromised in this breach:

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)