Cybersecurity Incident Forces Turning Stone Casinos to Go Cash-Only

Turning Stone Resort Casino and two sister properties in upstate New York have restricted transactions to cash only following a cybersecurity incident that forced key operational systems offline.

Parent company Turning Stone Enterprises, the commercial arm of the Oneida Nation, said it had shut down selected internal systems as a precaution following the incident, which affected its network and communications.

The decision forced properties to operate on a cash-only basis on Tuesday (Nov. 3), preventing customers from using credit cards while knocking out ATMs, sports betting, and bingo operations.

The incident affected Turning Stone Resort Casino in Verona, Point Place Casino in Bridgeport, and YBR Casino & Sports Book in Chittenango.

Other Turning Stone Enterprises operations—including The Lake House at Sylvan Beach, as well as Maple Leaf Markets and SavOn convenience stores—are also temporarily restricted to cash transactions.

Shutdowns Aimed at Protecting Guest Data

The company stated that the system shutdowns were implemented to protect guests’ personal information while cybersecurity specialists investigate. Turning Stone has not publicly identified the cause or disclosed whether an external third party was responsible.

According to Utica television station WKTV, Turning Stone said Monday (Nov. 8) it had found no evidence that confidential information had been accessed. The investigation remains ongoing.

The outage also disrupted TS Rewards, the operator’s loyalty program through which patrons earn and redeem points on gaming, hotel stays, dining, and retail purchases.

In a statement posted to Facebook and reported by Syracuse station WSYR, the company said its team was “working at full speed with cybersecurity experts to return to full working order,” without offering a timeline.

Management confirmed it will publish daily evening updates regarding service availability until all systems are fully restored.

Industry Cybersecurity Vulnerabilities

Commercial and tribal casinos across North America have faced an escalating wave of high-profile cyberattacks in recent years, including ransomware operations that have crippled property networks and exposed sensitive customer databases.

Tribal casinos may be attractive targets because attackers perceive them as having weaker cybersecurity systems and fewer resources to defend against sophisticated threats, according to the FBI.

Across the broader gaming sector, operators present lucrative targets for threat actors due to their high transaction volume, extensive customer data repositories, and heavy reliance on interconnected digital infrastructure that creates severe operational leverage when taken offline.

In September 2023, MGM Resorts International suffered a cyberattack that disrupted hotel reservations, casino transactions, and other services across its US properties. The company subsequently estimated the impact on its third-quarter earnings at approximately $100 million.