Casino LLC  dba Larry Flynt's Lucky Lady Casino Data Breach Notice (Vermont Attorney General)

A single person’s Social Security number is now listed in a Vermont Attorney General filing as exposed in an incident reported by Casino LLC, doing business as Larry Flynt’s Lucky Lady Casino. The notice, filed on June 10, 2026, states that one Vermont resident’s Social Security number was included in the data involved.

Social Security Numbers Do Not Expire

The filing names only one category: Social Security numbers. No other information categories appear in the record. Because a Social Security number cannot be changed or reissued on request the way a credit card or password can, this exposure creates a permanent risk of identity theft and tax fraud that lasts for years.

If you received a letter from the casino notifying you of this incident, your Social Security number was among the records exposed. The organisation is required to notify affected individuals directly, usually by post. Absence of a letter usually means your information was not included, but anyone who has moved since the incident should contact the casino directly to confirm their status.

What This Exposure Enables

A Social Security number is one of the few pieces of information that can be used to open new financial accounts, file fraudulent tax returns, claim government benefits, or impersonate someone in medical or employment records. Because the record lists no passwords, no financial account numbers, and no other identifiers, the immediate risk centers on what criminals can build using the Social Security number alone or in combination with information obtained elsewhere.

The filing does not disclose whether the Social Security numbers were encrypted at rest, how the data was accessed, or the root cause of the breach. Those details remain unknown to the public.

The Scale Is Small but the Risk Is Not

Only one person is named in this Vermont filing. That does not reduce the seriousness for the individual affected. When a permanent identifier such as a Social Security number leaves an organisation’s control, the passage of time does not diminish its value to identity thieves. Criminals continue to use stolen Social Security numbers long after the original breach is forgotten.

The record contains no information about the organisation’s security practices, the method of access, or whether any controls limited what was taken. It states only what was reported: one person’s Social Security number was exposed.

How to Determine If You Are Affected

The letter is the only reliable way to know. The filing does not state when the incident occurred, so there is no date against which to measure recent address changes. If you have an existing relationship with Larry Flynt’s Lucky Lady Casino and have not received correspondence about this matter, reach out to them directly. Do not assume safety simply because time has passed.

Protecting Yourself When the Identifier Cannot Be Changed

Because the exposed data cannot be replaced, the focus shifts to monitoring and limiting what criminals can do with it. Place a freeze on your credit reports at the three major bureaus so new accounts cannot be opened without your explicit permission. This step is more effective than fraud alerts for permanent identifiers.

Monitor your tax filings closely each year. Set up an account with the IRS to receive online alerts and consider filing Form 14039, an Identity Theft Affidavit, if you see signs of fraudulent returns using your number.

Review Explanation of Benefits statements from health insurers even if you did not seek care at the casino. Medical identity theft can appear months or years later through claims filed under your Social Security number.

Order free annual credit reports and check them for accounts you do not recognize. Consider enrolling in credit monitoring that specifically watches for new account activity rather than simply scanning the dark web for your number.

Be wary of unsolicited calls, texts, or emails that reference your casino relationship or ask for verification using your Social Security number. Criminals who possess the number may attempt to gather additional details to strengthen their impersonation.

This incident involves a single Vermont resident according to the public filing. The letter you may or may not have received remains the definitive indicator of whether your information was included. Where a Social Security number is concerned, vigilance over time matters more than any single action taken today.