On December 19, 2024, the Black Oak Casino Resort — operated by and for the Tuolumne Band of Me-Wuk Indians near Tuolumne, California — was posted to the Akira ransomware group's Tor-based leak site with a claimed exfiltration of over 90 gigabytes of sensitive data.

Black Oak Casino Resort is a major Northern California gaming destination that has operated since 2001. Its casino floor spans over 164,770 square feet, housing more than 1,300 slot machines and 25 table games, plus a full-service hotel and multiple dining venues. For the Tuolumne Band of Me-Wuk Indians, the resort serves as the economic foundation supporting tribal social services, healthcare, housing, and education.

The stolen data reportedly includes employee and customer contact information, financial records, and corporate contracts — categories with significant legal and personal implications for hundreds or thousands of individuals. The 90GB volume is substantially larger than the 17GB stolen from Avi Resort & Casino by the same group three months earlier, indicating that Akira affiliates continued to target the tribal casino sector through the end of 2024.

Akira's double extortion model — steal first, encrypt second — means affected parties face exposure of their private data regardless of whether a ransom was paid. The casino has not made public statements about the incident, leaving employees and patrons without formal notification of the breach.

Loading ...

Impact Analysis

Executive Summary

Attack Timeline

Verified References

Key Lessons Learned

Know Your Next Breach Before It Happens

Loading
...