Ransomware gang says it hacked Jackpot Junction Casino Hotel

Ransomware gang RansomHub yesterday claimed responsibility for a March 2025 cyber attack at Jackpot Junction Casino Hotel in Minnesota.

Jackpot Junction started reporting technical difficulties on March 27, 2025, when its phone lines went down. The casino later closed its slot machines “due to unforeseen technical issues.” Disruptions to bingo, continuity programs, promotional drawings, and a restaurant are still ongoing as of time of writing.

RansomHub on March 31, 2025 claimed responsibility for a cyber attack on Jackpot Junction, and gave the casino one month to pay an undisclosed sum in ransom. That deadline has since passed.

Jackpot Junction has not verified RansomHub’s claim. We do not know if personal data was compromised, if the casino paid a ransom, how much RansomHub demanded, or how attackers breached the casino’s network. Comparitech contacted Jackpot Junction for comment and will update this article if it replies.

“We want to inform you that due to unforeseen technical issues affecting our slot system, we have temporarily closed our casino slot floor. Our team is diligently working to resolve the issue as swiftly as possible,” said Jackpot Junction in a March 29, 2025 Facebook post.

Who is RansomHub?

RansomHub runs on a ransomware-as-a-service business in which affiliates pay to use the group’s malware and infrastructure to launch their own attacks and collect ransoms. RansomHub is behind high-profile attacks on Rite Aid, Christie’s auction house, Frontier Communications, and the Florida Department of Health. It first started posting organizations it hacked to its leak site in February 2024.

Since it began, RansomHub has claimed responsibility for 129 confirmed ransomware attacks, plus another 637 claims that haven’t been acknowledged by the targeted organizations.

In 2025 so far, RansomHub claimed 19 confirmed attacks and 205 unconfirmed claims. Some of those include attacks on Access Financial Services (Jamaica), the Hungarian National Museum, and Whitman Hospital and Medical Clinics (USA).

Ransomware attacks in the USA

Ransomware attacks can both lock down computers and steal data. Infected organizations must then either pay a ransom or face extended downtime, data loss, and putting data subjects at increased risk of fraud.

Comparitech researchers logged 53 confirmed ransomware attacks on US organizations so far in 2025, plus 1,118 unconfirmed claims.

We confirmed five such attacks in March 2025:

• Penn-Harris-Madison School Corporation was hit by unknown attackers
• Berkeley Research Group was hit by unknown attackers
• Central Texas Pediatric Orthopedics notified 90,000 people of a breach claimed by Qilin
• Union County, PA was hit by unknown attackers
• National Defense Corporation reported a breach claimed by Interlock

About Jackpot Junction Casino Hotel

Jackpot Junction Casino Hotel is located on the tribal land of the Lower Sioux Indian Community near Redwood Falls, Minnesota. It consists of a 46,000 square foot casino, more than 1,000 slot machines, 379-room hotel, 40-space recreational vehicle park, several restaurants, a golf course, live entertainment venues, and a convention center.