Casino Cybersecurity Threats: The Two Kings Incident in Tribal Casinos
Casino Cybersecurity Threats: The Two Kings Incident Targeting Tribal Casinos
The increasing tide of cybercrime has struck a precarious blow to the gaming industry, particularly in tribal casinos, underscoring the critical need for robust casino cybersecurity measures. The most recent instance involves the Two Kings Casino in Kings Mountain, NC, where a ransomware group named “Anubis” has threatened to publish stolen blueprints unless a ransom is paid.
Blueprints Stolen: A Threat to Security
According to Anubis, the stolen materials include detailed architectural plans of the $700 million resort currently in development, scheduled to open in 2026. These documents allegedly encompass crucial information about the casino’s layouts and sensitive areas, potentially guiding would-be criminals on how to facilitate a breach.
Tribe’s Response
Despite the hackers’ claims, the Catawba Nation, which operates the Two Kings Casino, asserts that the documents are outdated drafts and that there has been no disruption to casino services or compromise of customer data thus far. Trent Troxel, vice president of the Catawba Nation Gaming Authority, emphasized the importance of safeguarding customer information: “We take the security of customer data very seriously.”
Wider Implications of Cyber Threats
This incident falls within a worrying trend where tribal casinos have increasingly found themselves under siege from ransomware attacks. Similar incidents targeting the Jackpot Junction Casino in Minnesota and Kewadin Casinos in Michigan underscore the growing urgency for enhanced cybersecurity measures in the gambling industry.
Who is Anubis?
- Anubis is a comparatively new ransomware group, emerging around Q4 of 2024.
- Aside from tribal casinos, Anubis has targeted healthcare organizations and construction companies in various countries.
Conclusion
The incident involving the Two Kings Casino serves as a stark reminder of the vulnerabilities that can exist within the gaming industry. As cyber threats continue to evolve, both operators and stakeholders must prioritize robust cybersecurity frameworks to protect their assets.




