Turning Stone Casinos Shut Down Digital Systems After Cybersecurity Incident

On November 3, 2026, Turning Stone Enterprises, the commercial arm of the Oneida Indian Nation, reported a cybersecurity incident that disrupted operations across its gaming portfolio in upstate New York. The incident affected Turning Stone Resort Casino in Verona, Point Place Casino in Bridgeport, and YBR Casino & Sports Book in Chittenango, forcing all three properties to operate on a cash-only basis. The company also shut down services at non-gaming subsidiaries including The Lake House at Sylvan Beach and Maple Leaf Markets convenience stores.

As a precautionary measure, Turning Stone Enterprises disabled selected internal systems to protect customer information while cybersecurity specialists investigated the breach. The shutdowns immediately disrupted casino operations: credit card transactions were blocked, automated teller machines became unavailable, and sports betting and bingo operations went offline. The company's loyalty program, TS Rewards, which customers use to earn and redeem points across gambling, hotel stays, dining, and other purchases, also ceased functioning.

The company has not disclosed the cause of the incident or whether a third party was responsible for the disruption. According to reporting from local television station WKTV, Turning Stone stated on November 8 that investigators had found no evidence that confidential customer information had been accessed, though the investigation remained ongoing and the full scope of the incident had not been determined.

In a statement posted to Facebook and reported by Syracuse station WSYR, Turning Stone indicated its team was working with cybersecurity experts to restore full operations but did not provide a timeline for recovery. The company committed to publishing evening updates on service availability until the disruption was resolved.

This incident reflects a growing threat landscape for casino operators. The FBI has identified tribal casinos as attractive targets for cybercriminals, who perceive them as operating with comparatively weaker cybersecurity infrastructure and fewer defensive resources than larger commercial operators. Casinos broadly are high-value targets because they process substantial financial transactions, maintain extensive customer databases with sensitive personal information, and rely on interconnected systems that become extremely expensive to take offline, giving attackers significant operational leverage.

The gaming industry has experienced several high-profile breaches in recent years. Most notably, in September 2023, MGM Resorts International suffered a cyberattack that disrupted hotel reservations, casino transactions, and ancillary services across its U.S. properties. MGM subsequently estimated the financial impact on third-quarter earnings at approximately $100 million, underscoring the material business risk these incidents pose.

The Turning Stone incident demonstrates that cybersecurity threats span the entire operator landscape, from major publicly traded companies to smaller tribal gaming enterprises. As the industry continues expanding its digital infrastructure and customer touchpoints, operators at all scales face mounting pressure to invest in defensive capabilities and incident response protocols.