Hackers Allegedly Swipe $700 Million Worth of Blueprints from Two Kings Casino North Carolina Resort
Posted on: April 25, 2025, 07:30h.
Last updated on: April 25, 2025, 07:30h.
Philip Conneller @casinoorgphilcRead MoreGaming BusinessRegulationTribal Gaming Ransomware Group Threatens to Unveil $700M Casino Construction Plans* Tribe dismisses stolen documents as outdated drafts* Anubis joins wave of cybercriminals targeting tribal casinos*
In an alarming turn of events, a ransomware group going by the name "Anubis" has announced it has stolen extensive blueprints for the upcoming Two Kings Casino in Kings Mountain N.C. The group is urging the tribe to cough up a ransom, or else they'll reveal the designs to the world.
Beyond the financial ultimatum, there's no indication of any problems with casino services or customer data breaches, the tribe insists.
While the tribe's temporary gaming venue is up and running, it’s the new $700 million resort set to open in 2026 that's on Anubis's hit list.
Dark Web Warning
Anubis dropped their gloomy declaration on the Dark Web on Wednesday, granting the tribe a mere 19 hours to pony up. The clock's ticking, and the current situation remains uncertain.
Trent Troxel, vice president of the Catawba Nation Gaming Authority, claims that the design plans in Anubis's possession are just outdated drafts showcasing previous schematics.
"Our investigation is in full swing, but there's no sign that our network, operations, or customer data have been affected," Troxel stated. "We take the protection of our customers' data extremely seriously, and we'll continue our thorough probe."
As of Thursday, the tribe was unaware of any documents having been leaked by Anubis.
Potentially Dangerous Leaks
Should the plans indeed be made public, they'd provide valuable intel for potential thieves or crooks, enabling them to pull off physical heists or undetected criminal activities.
A genuine leak could be catastrophic for ventures like this, potentially eroding the trust of investors and partners, inviting unwanted attention from regulatory bodies, which the Catawba has already had its share of.
About Anubis
Anubis is a fresh face in the ransomware world, having surfaced around late 2024. They've made a name for themselves by favoring data extortion, operating using what appears to be a "malevolence as a service" model. This method involves not only stealing and threatening to disclose victim data but also presenting findings in a journalistic format, highlighting any supposed misdeeds of their targets[2].
Previous Targets
Anubis has its sights set on various industries, such as healthcare and engineering. They've acknowledged at least five victims across these sectors. Anubis has announced its intention to steer clear of education, government, and non-profit sectors[2]. Their activities are mostly observed in the U.S., Canada, Europe, and Australia.
Tribal Casinos Under Siege
The Two Kings Casino becomes the latest in a series of tribal casinos falling victim to ransomware groups. Two casino operators have already fallen prey to the same group, Ransomhub, in recent months.
Cyberattacks against the Lower Sioux Indian Community's Jackpot Junction Casino in Minnesota and the Sault Ste. Marie Tribe of Chippewa Indians' Kewadin Casinos in Michigan have caused significant chaos for operations. In a bizarre twist, Ransomhub even penned a stern letter to the Sault Tribe's local newspaper, The Sault Tribe Guardian, to reprimand the tribe's leadership for refusing to collaborate.
- The ransomware group Anubis, known for data extortion, has threatened to reveal the $700 million Two Kings Casino blueprints in Kings Mountain, N.C.
- The Catawba Nation, the casino's tribal authority, claims the stolen plans are outdated drafts, insisting there's no evidence of network, operation, or customer data breaches.
- The new Two Kings Casino, set to open in 2026, is the target of Anubis, while the temporary gaming venue is operational.
- Anubis dropped their demand on the Dark Web, giving the Catawba Nation only 19 hours to pay the ransom before leaking the blueprints.
- The potential leak of the casino blueprints could endanger investments, partner trust, regulatory scrutiny, and even expose the casino to physical theft or unlawful activities.
- Anubis, a rising threat in the ransomware world, has already targeted industries such as healthcare and engineering, yet has pledged to avoid targeting education, government, and non-profit sectors.
- The Two Kings Casino incident marks another instance of tribal casinos being targeted by ransomware groups, following attacks on the Lower Sioux Indian Community's Jackpot Junction Casino and the Sault Ste. Marie Tribe of Chippewa Indians' Kewadin Casinos.
- The increasing cyberattacks on tribal casinos call for heightened focus on casino-and-gambling industry cybersecurity and technology regulations to protect the industry's culture, casino-games, and casino-businesses from future cyber threats.