Eureka Casino Hotel Data Breach Settlement, Claim by May 11, 2026

Rancho Mesquite Casino (Eureka Casino Hotel) agreed to a $1 million settlement over a November 2022 ransomware attack that exposed the data of 229,299 people. Claims are open right now. The claim deadline is May 11, 2026. Eligible individuals can receive up to $5,000 for documented losses, a $100 California statutory payment, and a pro-rata cash share. File at ECHDataSettlement.com.

Claim Deadline: May 11, 2026 — Act Now

The claim deadline is May 11, 2026. Unlike some settlements that mail automatic checks, this one requires you to file a claim form. If you received a breach notice from Eureka Casino Hotel and do nothing, you receive nothing.

Key Dates at a Glance

Event	Date
Data breach occurred	Nov. 9–13, 2022
Breach notices sent	Dec. 2022 and Feb. 2023
Claim deadline	May 11, 2026
Payments issued	~30 days after claim approval or ~60 days after final approval, whichever is later

Settlement Status: Claims Are Open

Rancho Mesquite Casino Inc., dba Eureka Casino Hotel, agreed to pay $1 million to settle a class action lawsuit alleging it failed to adequately protect customer data during a security incident that occurred between November 9 and November 13, 2022.

The settlement is preliminarily approved and actively accepting claims through the official administrator website at ECHDataSettlement.com. The final approval hearing date has not been publicly confirmed as of February 21, 2026, but the claim window is open now.

Case Details

Field	Detail
Case name	Houghton v. Rancho Mesquite Casino, Inc.
Case number	2:2023cv00276
Court	U.S. District Court, District of Nevada
Defendant	Rancho Mesquite Casino Inc. dba Eureka Casino Hotel
Total settlement	$1,000,000
Official settlement website	ECHDataSettlement.com
Administrator phone	1-888-688-4260
Administrator email	[email protected]
Administrator mailing address	Eureka Data Security Incident Litigation Settlement Administrator, Attn: Claim Forms, 1650 Arch St., Suite 2210, Philadelphia, PA 19103

What Happened

On November 9, 2022, hackers gained access to Eureka Casino’s systems and encrypted company data in a ransomware attack. Eureka discovered the breach on November 12, 2022. The data stolen included names, Social Security numbers, and financial account numbers or debit/credit card numbers combined with security codes, passwords, or PINs.

Rancho Mesquite Casino notified 229,299 individuals affected by the breach. The lawsuit alleged that Eureka failed to encrypt sensitive data and did not provide timely enough notice to affected individuals. Eureka denies any wrongdoing but agreed to settle to avoid continued litigation.

Settlement Fund Breakdown

The official settlement documents confirm the following fee and cost structure. Attorney fees are not publicly disclosed as a confirmed dollar amount in available sources, so the table below reflects confirmed deductions and an estimated net fund.

Item	Amount
Gross settlement fund	$1,000,000
Attorney fees (est. ~33%)	~$330,000
Administration costs (est.)	~$50,000–$75,000
Service awards (est.)	~$5,000–$10,000
Estimated net fund for claimants	~$585,000–$615,000

Disclosure: The exact attorney fee percentage and administration cost have not been publicly confirmed in available sources as of February 21, 2026. The above estimates are based on typical data breach settlement structures. Confirmed figures will be available in the official settlement agreement at ECHDataSettlement.com.

What You Can Receive: Three Benefit Types

Benefit 1 — Out-of-Pocket Expense Reimbursement (up to $5,000)

All class members who suffered a proven monetary loss as a result of the data breach and submit a valid claim can receive reimbursement for unreimbursed losses. Eligible expenses include unreimbursed losses related to fraud or identity theft and costs for credit monitoring, postage, copying, travel, notary charges, phone/data charges, bank fees, accountant or attorney fees, and other expenses directly related to the data incident. You must provide supporting documentation such as receipts, bills, or bank statements.

Benefit 2 — California Statutory Payment ($100)

Class members who are California residents, or who resided in California at any time between November 9, 2022 and May 11, 2026, can claim an additional $100 statutory payment. Class members must provide a sworn attestation of residency. No receipts or fraud documentation are required for this benefit.

Benefit 3 — Pro-Rata Cash Payment

The settlement administrator will distribute any remaining funds after all other payments equally among all class members who submit a valid claim and request this benefit. The per-person amount depends entirely on how many claims are filed.

Payment Examples

Assumption used: Estimated net fund of ~$600,000. Pro-rata pool assumed at ~$200,000 after out-of-pocket and California payments are satisfied. Estimated valid claims: 10,000–50,000.

High Scenario — Documented Fraud Losses + California Resident

• Documented losses: unauthorized credit card charges ($1,200), identity theft restoration service ($400), credit freeze fees ($30)
• Out-of-pocket reimbursement claim: $1,630
• California statutory payment: $100
• Pro-rata share (est. 10,000 claims against $200,000 pool): ~$20
• Estimated total: ~$1,750
• Documentation required: bank/credit card statements, service invoices

Mid Scenario — Minor Expenses, Non-California Resident

• Documented losses: paid credit monitoring for 12 months ($120), time spent disputing fraud ($50 self-certified)
• Out-of-pocket claim: ~$170
• Pro-rata share: ~$20
• Estimated total: ~$190

Low Scenario — No Documented Losses, Pro-Rata Only

• No fraud or out-of-pocket expenses to document
• Pro-rata share only (est. 50,000 claims against $200,000 pool): ~$4
• Estimated total: ~$4

This low-scenario outcome is common in data breach settlements with large affected populations and small funds. Even without documented losses, filing is free and takes minutes.

Disclosure: The settlement administrator may reduce payments on a pro rata basis if the total approved claims exceed the available settlement funds. All payment examples above are illustrative estimates only.

Who Is Eligible

To be eligible, you must be an individual residing in the United States whose private information was compromised in the Eureka Casino Hotel data security incident that occurred between November 9 and November 13, 2022, and you must have received a notice from Eureka Casino Hotel about the data breach.

You are NOT eligible if:

• You did not receive a breach notice from Eureka Casino Hotel
• You are not a U.S. resident
• You were affected through Eureka Casino Las Vegas, which has separate ownership and data infrastructure and was not affected by this breach.

How to File Your Claim — Step by Step

Online (fastest):

1. Go to ECHDataSettlement.com
2. To file an online claim, class members must provide the notice ID and confirmation code from the personalized notice they received in the mail or via email.
3. Select which benefits you are claiming (out-of-pocket, California statutory, pro-rata, or all three)
4. Upload supporting documentation if claiming out-of-pocket losses
5. Submit before May 11, 2026

By mail:

1. Download the PDF claim form from ECHDataSettlement.com
2. To file a claim by mail, class members must provide either the notice ID or their Social Security number.
3. Attach documentation for any out-of-pocket expense claims
4. Mail to: Eureka Data Security Incident Litigation Settlement Administrator, Attn: Claim Forms, 1650 Arch St., Suite 2210, Philadelphia, PA 19103
5. Postmark by May 11, 2026

Frequently Asked Questions

Is the Eureka Casino settlement approved and paying out? The settlement is preliminarily approved and actively accepting claims. It is not yet final. Payments will be issued approximately 30 days after your claim is approved, or 60 days after final court approval — whichever is later.

How much will I get? It depends on which benefits you claim. Documented out-of-pocket losses can be reimbursed up to $5,000 with supporting evidence. California residents can claim an additional $100. Everyone who files also receives a pro-rata share of the remaining fund, estimated at $4–$20 depending on total claims filed.

Do I need my notice ID to file? Online filers need both the notice ID and confirmation code from their breach notice. Mail filers need either the notice ID or their Social Security number. If you lost your notice, call 1-888-688-4260.

What data was stolen in the breach? The breach exposed sensitive personal information including names, Social Security numbers, financial account details, passport numbers, and driver’s license or state-issued identification numbers.

Does Eureka Casino Las Vegas count? No. Eureka Casino Las Vegas has separate ownership and data infrastructure and was not affected by this breach. Only customers and employees of the Mesquite, Nevada property (Rising Star Sports Ranch Resort) and The Brook in New Hampshire are covered.

What if I have no documented losses? You can still file for a pro-rata cash payment — no documentation is needed for that benefit. It’s free to file and takes only a few minutes online.

Is the $100 California payment automatic? No. California class members must provide a sworn attestation of residency as part of their claim form. You must actively request this benefit.

Did Eureka Casino admit wrongdoing? No. Eureka denies any wrongdoing but agreed to the settlement to resolve the claims.

Mandatory Disclaimer

This article is for informational purposes only and does not constitute legal or tax advice. Settlement terms, eligibility, and payment amounts are subject to court approval and may change. For official information, always refer to the settlement administrator at ECHDataSettlement.com, call 1-888-688-4260, or email [email protected].

Payment examples in this article use illustrative assumptions about the net fund and total claims filed. Actual amounts will differ. Do not rely on these estimates to make legal or financial decisions.

AllAboutLawyer.com is not affiliated with Rancho Mesquite Casino Inc., Eureka Casino Hotel, or the settlement administrator.

Last Updated: February 21, 2026

Sources: ECHDataSettlement.com (official settlement website); ClaimDepot.com (February 20, 2026); 8 News Now Las Vegas (February 2023); Console & Associates P.C. (February 2023); CDC Gaming (February 2023); Case No. 2:2023cv00276, U.S. District Court, District of Nevada.