Turning Stone Resort Casino and two sister properties in upstate New York restricted transactions to cash only after a cybersecurity incident forced key operational systems offline, leaving customers unable to use credit cards across the venues.
The affected venues are Turning Stone Resort Casino in Verona, Point Place Casino in Bridgeport and YBR Casino & Sports Book in Chittenango. Their parent company, Turning Stone Enterprises, is the commercial arm of the Oneida Nation.
Turning Stone Enterprises said it had shut down selected internal systems as a precaution following the incident, which affected its network and communications. The company said the shutdowns were implemented to protect guests’ personal information while cybersecurity specialists investigate.
The disruption extended beyond the gaming properties. Other Turning Stone Enterprises operations — The Lake House at Sylvan Beach, Maple Leaf Markets and SavOn convenience stores — were also temporarily restricted to cash transactions.
On Tuesday, Nov. 3, the shutdowns forced the properties to operate on a cash-only basis, preventing customers from paying by credit card and knocking out ATMs, sports betting and bingo operations. The outage also disrupted TS Rewards, the operator’s loyalty program through which patrons earn and redeem points on gaming, hotel stays, dining and retail purchases — a core tool for tracking and rewarding repeat play across the group’s gaming and non-gaming businesses.
Turning Stone has not publicly identified the cause of the incident or disclosed whether an external third party was responsible. According to Utica television station WKTV, the company said it had found no evidence that confidential information had been accessed, and that the investigation remains ongoing.
In a statement posted to Facebook and reported by Syracuse station WSYR, the company said its team was “working at full speed with cybersecurity experts to return to full working order,” without offering a timeline for restoration. Management confirmed it will publish daily evening updates regarding service availability until all systems are fully restored.
Casinos remain a prime target
The episode lands amid an escalating wave of high-profile cyberattacks on commercial and tribal casinos across North America in recent years, including ransomware operations that crippled property networks and exposed customer databases.
Gaming operators are attractive to threat actors because of their high transaction volumes, extensive customer data repositories and reliance on interconnected digital infrastructure — a combination that hands attackers significant operational leverage the moment systems are taken offline. According to the FBI, tribal casinos may be particularly attractive targets because attackers perceive them as having weaker cybersecurity systems and fewer resources to defend against sophisticated threats.
The potential financial consequences were underlined in September 2023, when MGM Resorts International suffered a cyberattack that disrupted hotel reservations, casino transactions and other services across its US properties. The company subsequently estimated the impact on its third-quarter earnings at approximately $100 million.
This article was produced with AI assistance and reviewed under the GamblingZine editorial verification process.
Sources
- Cybersecurity Incident Forces Turning Stone Casinos to Go Cash-Only — Independent reporting (published 2026-11-03)
- www.casino.org — Authoritative secondary source
- www.casino.org — Authoritative secondary source
- www.casino.org — Authoritative secondary source
Reporting verified against the sources above; retrieval timestamps are preserved in the editorial record.