Las Vegas Sands

Sands sold its Las Vegas properties and now operates primarily in Macau and Singapore, so a US consumer's exposure is largely historical. In 2014 it suffered a destructive cyberattack that took down IT systems including email, which Director of National Intelligence James Clapper publicly attributed to Iran in February 2015 Senate testimony, aimed at damaging systems rather than stealing data — a category distinction worth preserving, since most findings in this tracker involve data taken for resale. Casino loyalty programmes anywhere hold gambling volume and pattern data, which is financial-behaviour information with obvious potential for harm to people with gambling problems.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass — standard binding arbitration + class action waiver expected.

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.