Riverside Resort & Casino Data Breach Settlement

Riverside breach notice recipients may claim. This settlement resolves claims over a targeted cyberattack on Riverside's computer systems in July 2024, in which files containing names, addresses, Social Security numbers, driver's license and government ID numbers, financial account and card numbers, medical and health insurance information and dates of birth were accessed. Claims are due January 4, 2027. Four things are worth getting straight before you file. First, the real gate is the notice, not the casino. The class is only people who were sent a breach notification — not everyone who stayed at or gambled at a property called Riverside. Notices went out from October 5, 2026 carrying a Login ID and PIN, and the online claim form will not open without them. The printable paper form asks for the Login ID only “if known,” so that is the route if your letter is gone, though membership is still checked against Riverside's list. Second, the cash options are either-or, and the flat payment gives up more than people expect. You choose either the flat payment — expected $75 for California residents, $50 elsewhere, no proof needed — or documented losses plus lost time. The claim form warns in capitals not to claim the flat payment if you are claiming either documented losses or lost time. The one benefit that stacks with whichever you pick is one year of credit monitoring, free and with no paperwork. Third, the $3,000 caps one route, not the settlement. It is a ceiling on documented out-of-pocket losses plus lost time combined — those two genuinely do stack with each other, but lost time counts inside the $3,000, not on top of it. Nobody receives $3,000 automatically, and it is not available alongside the $50 or $75. Fourth, the $50 and $75 are expected amounts, not guarantees. All cash benefits share an aggregate cap of $1,000,000; if claims exceed it every payment is cut pro rata, and the official materials say the flat payment “may be larger or smaller depending on the total claims filed.” Note that neither $1,000,000 figure here is cash to the class — one is that benefits ceiling, the other is the fraud insurance limit inside the monitoring product. One quirk worth the arithmetic: outside California, three hours of lost time pays $60 with no receipts — more than the $50 flat payment — while California residents do better with the $75. And watch the December 4, 2026 opt-out and objection deadline, a month before claims close.

Do I Qualify?

You may be eligible if:

• You were sent Notification that your Private Information was compromised in the Data Incident Riverside discovered in or around July 2024. That is the Court's class definition, word for word, and it is the whole test
• You reside in the United States. There is no state restriction and no state-by-state difference in the benefits, except that the flat payment is expected to be $75.00 for California residents and $50.00 for residents of all other states
• In practice, a notice was mailed to you. The administrator began mailing notices on October 5, 2026, and the notice says Riverside's records indicate you are a Class Member. Some people had also received an earlier notice directly from Riverside
• You do NOT have to have been a guest, gambler, customer or employee of any property called Riverside. Visiting a casino of that name does not put you in this class, and never having visited one does not keep you out. The only question is whether a notification was sent to you
• The settlement does NOT say which Riverside this is. The defendants are identified only as Riverside Resort & Casino, Inc. and Riverside Resort & Casino, LLC, with the case in the Circuit Court for Columbia County, Wisconsin. The website, notice, FAQs and claim form never state where the property is, so confirm eligibility from your notice or by asking the administrator rather than by matching the name
• You do NOT need to have lost any money. The flat payment needs no proof or explanation, the lost time payment needs no receipts, and the credit monitoring needs no documentation. Proof is required only for the documented-loss route
• You can get hold of the Login ID and PIN, or you are willing to use the paper form. The online claim form will not open without the Login ID and PIN from your notice. The printable paper form asks for the Login ID only “if known.” The administrator will also look your codes up — email info@RiversideDataSettlement.com with your full name and mailing address, or call (833) 200-8003
• You have not already opted out. The claim form says that if you submitted a request to be excluded, you must not submit a claim. The opt-out deadline is December 4, 2026
• You are not in an excluded group. The exclusions are narrow: Riverside and its officers, directors and related companies; the attorneys for the parties; and the Judge in this case along with the Judge's family and staff
• You submit one valid Claim Form by January 4, 2027 — online by that date, or on paper. Note the conflict in the official documents: the FAQs and notice say postmarked by January 4, 2027, while the Claim Form says received by January 4, 2027. Mail early or file online

There are two separate things people call “proof” in this settlement, and conflating them is the easiest way to lose a claim. Gate one: getting into the claim form. The online portal at RiversideDataSettlement.com opens with a login screen asking for a Login ID and PIN printed on the notice the administrator mailed you, and the claim form will not open without them. The site's instruction is explicit: if you cannot locate your ID and PIN, email info@RiversideDataSettlement.com with your full name and mailing address to request them, or call (833) 200-8003. The paper form is more forgiving than in most breach settlements, and that matters. The printable Claim Form asks for the “Login ID (if known)” — so a lost notice does not shut you out of the paper route the way it does in settlements that gate both routes on the code. Mail the form to Riverside Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958, or email a scanned image of the completed form to info@RiversideDataSettlement.com. Either way, class membership is still verified against Riverside's list of people who were sent notification, so the paper form is a way around a missing code, not a way around the class definition. Gate two: documenting the benefit you picked. This splits cleanly, and most of it needs nothing at all. Credit monitoring needs no documentation — it is a single checkbox in Section II of the claim form, available to every class member. The flat Alternative Cash Payment needs no proof or explanation; the FAQs and the claim form both say so in terms. You tick Section V and attest. Lost time needs no receipts either. Section IV asks only that you select 1 hour ($20.00), 2 hours ($40.00) or 3 hours ($60.00) — there is no documentation requirement attached to it, only the requirement that you actually spent the time on tasks related to the incident, such as changing passwords, investigating suspicious account activity or researching the Data Incident. Only the up-to-$3,000 out-of-pocket reimbursement needs records. You complete a table describing each item of supporting documentation and its amount, and attach proof — the settlement materials name bank statements or receipts as examples. The materials are explicit that notes or papers you made yourself are not enough on their own: they can explain or support other proof, but cannot carry a claim. Your proof should show the expense was caused by the Data Incident, and the loss must have been incurred between July 25, 2024 and January 4, 2027. You cannot claim an expense a third party has already reimbursed. If you have more expenses than the table has rows, you may attach extra sheets, printing your name and signing the bottom of each. Everything is signed under penalty of perjury. The attestation reads that the information provided, including supporting documentation, is true and correct to the best of your knowledge, and that the claim is subject to verification — the administrator may ask for supplemental information before treating the claim as complete and valid. Submit only one claim form per person, online or paper. One practical consequence of the no-proof options. Because both the flat payment and lost time are proof-free, the choice between them for a non-California resident is pure arithmetic rather than paperwork: three hours of lost time is $60.00 against a $50.00 flat payment. California residents are better off with the $75.00 flat payment. Only claim hours you genuinely spent — the attestation is sworn, and claims are verified.

What Happened?

Riverside Resort & Casino, Inc. and Riverside Resort & Casino, LLC (together “Riverside”) maintained private information belonging to the people who later became the Settlement Class. The settlement materials identify the defendants by name only; neither the settlement website, the notice, the FAQs nor the claim form states where the property is located.

In July 2024 Riverside's computer systems were hit by what the settlement documents call a targeted cyberattack. Certain files containing private information were accessed. Riverside discovered the Data Incident in or around July 2024.

The settlement website lists the information that may have been involved as names; addresses; Social Security numbers; driver's license and government-issued ID numbers; financial information such as account numbers and credit or debit card numbers; medical information; health insurance information; dates of birth; and any other personally identifiable information or protected health information Riverside collected and maintained. Not every class member's records contained every category.

Eleven plaintiffs — Robert Dapello, Brian Scott Giuiland, Carol Ann Laudonio, Gary Lester, Kathleen Maddox, Jean Markgraf, Darlene Martin, Michael J. Montoya, Floyd Patten, Amber McConnell and Ronald Hansen — sued as Class Representatives. The case is Dapello, et al. v. Riverside Resort & Casino, Inc. and Riverside Resort & Casino, LLC, Case No. 2026CV000097, in the Circuit Court for Columbia County, Wisconsin.

Riverside denies that it did anything wrong, and the Court has not decided who is right. The FAQs state both sides agreed to settle to avoid the costs and risks of a trial and to let class members receive benefits now.

The Court preliminarily approved the settlement and authorised notice. The administrator, Simpluris, began mailing notices on October 5, 2026. The claim deadline is January 4, 2027 and the opt-out and objection deadline is December 4, 2026.

The Court appointed A. Brooke Murphy of Murphy Law Firm and Alex Phillips of Strauss Borrelli PLLC as Class Counsel. Class members are not charged for their services. Class Counsel will ask the Court to approve $500,000.00 in attorneys' fees and litigation costs, plus service awards of $2,000.00 for each Class Representative. The FAQs state Riverside pays both separately.

Cash benefits are subject to an aggregate cap of $1,000,000.00. If the total value of benefits claimed exceeds that figure, every payment is reduced pro rata. The $1,000,000 is a ceiling on benefits rather than a fund distributed in full, and it should not be confused with the separate $1 million of financial fraud insurance bundled inside the CyEx credit monitoring product.

The Final Approval Hearing is scheduled for January 27, 2027 at 11:00 a.m. at the Columbia County Courthouse, 400 DeWitt Street, Portage, Wisconsin. The FAQs warn the date and time may change without further notice. Benefits are distributed only if the Court grants final approval and after any appeals are resolved; the settlement website does not give a payment date.

How to File Your Claim

1. FILE AT RIVERSIDEDATASETTLEMENT.COM — the official settlement website, administered by Simpluris. Use the Submit a Claim tab for the online portal, or download the printable Claim Form from the Important Documents page
2. THE ONLINE FORM NEEDS THE LOGIN ID AND PIN FROM YOUR NOTICE. The login screen asks for a Login ID and a PIN that are printed on the notice the administrator mailed you, and the claim form will not open without them. If you cannot find them, the site tells you to email info@RiversideDataSettlement.com with your full name and mailing address to request them, or you can call (833) 200-8003 toll free
3. THE PAPER FORM IS THE WORKAROUND IF YOUR LETTER IS GONE. Unlike many breach settlements, the printable Claim Form asks for the Login ID only “if known,” so a missing code does not shut you out of the paper route. Mail it to Riverside Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799-9958. The claim form also says a scanned image of the completed form can be emailed to info@RiversideDataSettlement.com
4. MAIL EARLY — THE OFFICIAL DOCUMENTS DISAGREE ON WHAT JANUARY 4 MEANS. The FAQs and the notice say a mailed Claim Form must be postmarked no later than January 4, 2027. The Claim Form itself says claims must be RECEIVED by January 4, 2027, and that paper forms must be mailed “so that they are received by the Claims Administrator no later than January 4, 2027.” Received is the stricter reading, so do not rely on a January 4 postmark. Filing online removes the problem entirely
5. CHECK THE CREDIT MONITORING BOX FIRST — IT DOES NOT COST YOU THE CASH. Section II of the claim form is a standalone checkbox for one year of CyEx Financial Shield Total. Every class member may claim it, and the claim form's “do not claim both” warnings apply only to the cash sections, never to Section II
6. THEN PICK ONE CASH ROUTE — THE FORM SAYS SO IN CAPITALS. Section V (the flat Alternative Cash Payment) warns: “DO NOT CLAIM THIS BENEFIT IF YOU ARE CLAIMING PAYMENTS FROM SECTION III OR IV.” Section III (documented losses) warns: “DO NOT CLAIM THIS BENEFIT IF YOU ARE CLAIMING A PAYMENT FROM SECTION V.” So the flat payment excludes documented losses AND lost time, not just documented losses
7. ROUTE A — THE FLAT PAYMENT. Check Section V only. Expected $75.00 if you are a California resident, $50.00 if you live in any other state. No proof, no receipts and no explanation required
8. ROUTE B — DOCUMENTED LOSSES AND LOST TIME, WHICH DO STACK WITH EACH OTHER. Section III reimburses documented out-of-pocket losses incurred between July 25, 2024 and January 4, 2027 — identity theft or fraud losses, credit report, credit monitoring or credit freeze and unfreeze fees, the cost of replacing IDs, and postage to contact banks by mail. Fill in the description-and-amount table and attach proof such as bank statements or receipts
9. notes you wrote yourself can support other proof but are not enough on their own, and you cannot claim anything a third party already reimbursed. Section IV is lost time: tick 1 hour ($20.00), 2 hours ($40.00) or 3 hours ($60.00), with no receipts. Sections III and IV together are capped at $3,000.00
10. NON-CALIFORNIA RESIDENTS, DO THE ARITHMETIC BEFORE YOU TICK SECTION V. Lost time pays up to $60.00 for three hours and needs no documentation — only the checkbox and your attestation. That is more than the $50.00 flat payment available to residents outside California. California residents are better off with the $75.00 flat payment. Either way the claim is signed under penalty of perjury and is subject to verification, so only claim hours you actually spent
11. PICK HOW YOU WANT TO BE PAID. Section VI offers PayPal, Venmo, Zelle, a virtual prepaid card or a physical check mailed to the address you give in Section I. Give an email address and phone number you actually use
12. SUBMIT ONLY ONE CLAIM FORM PER PERSON, online or paper — the form says so — and sign it. The attestation is under penalty of perjury, and the administrator may ask for supplemental information before treating your claim as complete
13. DO NOT MISS THE EARLIER DECEMBER 4, 2026 DEADLINE. Opting out and objecting both close a full month before claims do. Opting out is the only way to keep the right to sue Riverside separately over this incident
14. QUESTIONS: the Settlement Administrator at (833) 200-8003 toll free or info@RiversideDataSettlement.com. Do not contact the Court or the Clerk of Court about this settlement
15. Visit the official claim form: https://www.riversidedatasettlement.com/

How Much Will I Actually Get?

THE CASH OPTIONS ARE EITHER-OR, BUT THE CREDIT MONITORING STACKS ON TOP OF EITHER. Get the structure straight before you file, because it is a hybrid and the headline “$50 or up to $3,000” hides two separate traps. Every class member may claim one year of CyEx Financial Shield Total credit monitoring, which carries $1 million of financial fraud insurance and covers fraud and identity theft, unauthorized financial transactions and personal information used in high-risk transactions, with access to a fraud resolution agent. It is a standalone checkbox (Section II of the claim form), it requires no documentation, and the claim form's exclusivity warnings never mention it — so it does not reduce whatever cash you pick. ON THE CASH SIDE YOU MUST CHOOSE, AND THE FLAT PAYMENT EXCLUDES MORE THAN PEOPLE EXPECT. The Alternative Cash Payment is expected to be $75.00 for California residents and $50.00 for everyone else, with no proof or explanation required. The claim form states it is available “instead of any other payments” and warns in capitals: DO NOT CLAIM THIS BENEFIT IF YOU ARE CLAIMING PAYMENTS FROM SECTION III OR IV. Section III is documented losses and Section IV is lost time, so taking the flat payment gives up BOTH of them — not just the documented-loss claim. INSIDE THE OTHER ROUTE, THE TWO BENEFITS GENUINELY DO STACK. Documented out-of-pocket losses from the incident incurred between July 25, 2024 and January 4, 2027 are reimbursed up to $3,000.00, and lost time is paid at $20.00 an hour for up to three hours, a maximum of $60.00. You may claim both, but the claim form is explicit that lost time counts inside the same $3,000.00 ceiling rather than on top of it. THE $3,000 CAPS ONE ROUTE, NOT THE SETTLEMENT. It is a per-class-member ceiling on documented losses plus lost time. It is not an amount anyone receives automatically, it is not a cap on the settlement as a whole, and it is not available alongside the $50 or $75. Reaching it would require roughly $2,940 in documented, third-party-proven losses on top of the maximum lost time. Qualifying expenses are the enumerated kind: identity theft or fraud losses, credit report, credit monitoring and credit freeze or unfreeze fees, ID replacement and postage to contact banks by mail. Anything a third party already reimbursed cannot be claimed. THE $50 AND $75 ARE EXPECTED AMOUNTS, NOT GUARANTEES. All of these cash benefits share an aggregate cap of $1,000,000.00. If the total value of benefits claimed exceeds it, every payment is reduced pro rata so the total comes back to $1,000,000.00, and both the FAQs and the claim form warn that the flat payment “may be larger or smaller depending on the total claims filed.” It can move in either direction. NEITHER $1,000,000 FIGURE IN THIS SETTLEMENT IS A FUND PAID OUT TO THE CLASS. Two different million-dollar numbers appear in the documents and it is easy to add them up wrongly. The first is the aggregate ceiling on cash benefits — a maximum, not a pot that gets distributed in full. The second is the $1 million of financial fraud insurance bundled inside the credit monitoring product, which is an insurance coverage limit you would have to suffer a covered loss to touch, not money. ATTORNEYS' FEES DO NOT COME OUT OF YOUR PAYMENT. Class Counsel will ask the Court to approve $500,000.00 in fees and litigation costs and service awards of $2,000.00 for each of the eleven Class Representatives, and the FAQs state Riverside pays both separately. NOTHING IS PAID UNTIL THE COURT APPROVES. The Final Approval Hearing is set for January 27, 2027 at 11:00 a.m. at the Columbia County Courthouse, 400 DeWitt Street, Portage, Wisconsin, and the FAQs warn the date and time may change without further notice. If the Court approves the settlement, payments are distributed only after any appeals are resolved. The settlement website does not give a payment date. Payment comes by PayPal, Venmo, Zelle, virtual prepaid card or physical check, whichever you select on the claim form.

Last reviewed: October 12, 2026 | Information verified from court records and official settlement documents.

Frequently Asked Questions