Nevada Restaurant Services dottys.com Nevada Restaurant Services data breach: what happened and what to do
Nevada Restaurant Services, which owns Dotty's, said malware was found on certain systems on January 16, 2021 and that an unauthorized party copied some information. Notices went out from July 2021.
View all 13,177 breaches- Breach date
- 16 Jan 2021
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Nevada Restaurant Services (NRS) is the Las Vegas-area company behind the Dotty's restaurant and gaming venues. In its notice, NRS said malware was found on certain computer systems on January 16, 2021, and that an unauthorized party copied certain information from those systems on or before that date.
Notice letters dated July 1, 2021 went to the people NRS said were affected. NRS filed the breach with state attorneys general, including California and Washington. The Washington count covers that state's residents only, so it isn't a total. NRS has not published a total number of people affected.
What was taken isn't described the same way everywhere. Press coverage of the letters mentions details such as dates of birth and driver's license numbers, and some reports list further categories NRS said might be involved. Reports differ, so check the letter you received: it names the information that applies to you.
NRS offered 12 months of complimentary credit monitoring and identity theft services through IDX and encouraged people to review their bank accounts and credit reports.
If government ID numbers or dates of birth were involved, a thief can use them to try to open accounts or pass identity checks, and your date of birth never changes. That is why a credit freeze is the useful step here, more than watching one card. Serus can't remove data that was copied in a breach. It watches breach databases and the dark web for your details and alerts you when they show up.
Sources checked: ktnv.com, portswigger.net, casino.org
Last verified against the official page:
What to do if you were in it
- 1
Read your notice letter for exactly what applies to you
The letter lists the information NRS said was involved for you and how to enroll in the monitoring it offered.
- 2
Freeze your credit if a Social Security number was involved
A credit freeze is free and stops new accounts from being opened in your name. The FTC explains how to place one with Equifax, Experian and TransUnion: https://consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
- 3
Review your bank statements and credit reports
Look for charges or accounts you don't recognize. The FTC explains what to do if you find them at https://www.identitytheft.gov/databreach.
- 4
Expect scams that mention the breach or a casino account
Don't give details to anyone who contacts you first. Call the company on a number you look up yourself.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see where your details have shown up.
Official filings
- Washington Attorney General , filed 1 Jul 2021 : 3,241 people
Timeline
-
The breach happened
-
Reported to the Washington Attorney General
Frequently asked
Was I affected by the Nevada Restaurant Services breach?
If you received a notice letter from NRS, your information was involved. NRS hasn't published a public list.
What was exposed?
NRS said an unauthorized party copied certain information from its systems. Press reports of the letters mention details such as dates of birth and driver's license numbers. Your own letter is the best guide.
How many people were affected?
NRS hasn't published a total. Washington's attorney general lists only that state's residents.
Is there free credit monitoring?
NRS offered 12 months of complimentary credit monitoring and identity theft services through IDX to people it notified. Your letter explains how to sign up.
Sources
- ktnv.com/news/dottys-parent-company-announces-data-breach-says-private-info-may-have-been-released
- portswigger.net/daily-swig/data-breach-at-us-restaurant-and-gambling-chain-dottys-may-have-leaked-sensitive-customer-information
- casino.org/news/dottys-confirms-data-breach-gaming-company-latest-cyberattack-victim/
- consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
- identitytheft.gov/databreach
Something wrong or out of date? Tell us and we'll re-check it.
