
Wynn Resorts, a leading luxury hospitality and casino operator, recently experienced a data breach after being targeted by the ShinyHunters extortion group.
On Feb. 20, 2026, ShinyHunters claimed on their dark web leak site to have stolen more than 800,000 records containing personally identifiable information (PII) from Wynn Resorts. The threat actors stated that the data was taken from the company’s Oracle PeopleSoft environment, a platform often used for managing human resources and payroll information.
The attackers posted a warning on their leak site, demanding that Wynn Resorts contact them before Feb. 23, 2026, or risk the public release of the stolen data. After the threat was made public, the ShinyHunters post was removed from their site, a move that often signals ongoing negotiations or a dispute over the claims.
ShinyHunters is a well-known data extortion group responsible for several high-profile breaches, including recent attacks on Panera Bread, Betterment, SoundCloud, Canada Goose, and Match Group.
The stolen information reportedly includes names, Social Security numbers, and other employee records; however, the claims remain unconfirmed at this time.
Importantly, the incident did not affect guest operations or the physical properties of Wynn Resorts, which remain fully operational.
As a precaution, Wynn Resorts is offering complimentary credit monitoring and identity protection services to all affected employees. Those who believe their information may have been compromised should take the following steps:
Given the nature of the breach and the involvement of a sophisticated extortion group, it is especially important for affected individuals to remain vigilant and take advantage of the resources offered.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)