Taos Mountain Casino Breach: Social Security Numbers Compromised

Taos Mountain Casino, a small, tribally owned casino on Taos Pueblo land in Taos, New Mexico, disclosed a data breach that may have exposed the personal information of certain individuals. The casino discovered the incident on March 28, 2026.

Taos Mountain Casino detected suspicious activity on its computer systems on March 28, 2026. The breach itself occurred on March 26, 2026. Upon making this discovery, the casino disconnected all access to its network and brought in a specialized third-party cybersecurity firm to help secure its systems and conduct a comprehensive forensic investigation.

On May 4, 2026, the forensic investigation confirmed that some of the casino's files had been accessed by an unauthorized actor. Following this finding, the casino conducted a detailed review of the affected data to determine which specific individuals were impacted and what types of information were involved.

The personal information that may have been exposed includes names, addresses and Social Security numbers.

A ransomware group known as DragonForce claimed responsibility on June 1, 2026, posting on the tor network that it had obtained 38.63 GB of the casino's data.

The breach was reported to the New Hampshire Attorney General on June 8, 2026. The casino began mailing notification letters to affected individuals on June 9, 2026.

Taos Mountain Casino's response to the breach

Taos Mountain Casino is offering affected individuals 12 months of free credit monitoring, fraud consultation and identity theft restoration services through Kroll. To enroll, individuals should use the unique membership code included in their notification letter and visit the Kroll enrollment website at info.krollmonitoring.com. Enrollment must be completed within 90 days of the date printed on the notification letter.

Notification letters mailed to affected individuals contain a toll-free phone number that individuals can call with questions. The phone line is available Monday through Friday from 9:00 a.m. to 6:30 p.m. Eastern time, excluding U.S. national holidays. Callers should have their membership number ready when they call.