A recent study reveals that residents of Nevada face the greatest risk of having their online personal information breached. 

DesignRush, a B2B marketplace that links clients in need of web design, digital marketing, search engine optimization, and social media services with advertising and marketing agencies, observed Data Privacy Day 2025 on January 28 by conducting an extensive analysis of which states offer the most protection in the modern digital landscape. 

The DesignRush research evaluated all 50 US states according to their effectiveness in safeguarding residents’ data. Nevada, which boasts the wealthiest casino industry in the nation and possesses vast amounts of essential data on gamblers and their expenditures, ranked close to last. 

The Silver State was placed at No. 44, achieving a data safety score of 77.64 out of 100. According to researchers, Nevada’s score of 77.64 indicates the state’s “very high rate of cybercrime.” 

Nevada has a cybercrime rate of almost 308 cases per 100,000 individuals, which is over three times the national median. The rate is the highest in the nation. 

DesignRush clarified that the cybercrime rate reflects the frequency of online offenses such as identity theft, fraud, and personal data breaches for every 100K residents. Reduced rates signify enhanced protections against cyber risks. 

Cybercrime in Nevada 

Due to its numerous casinos and authorized gaming establishments — 310 venues featuring slot machines as of December 2024 — cybercriminals persist in attacking businesses in Nevada. Cyberattacks frequently target customer and employee data, which malicious individuals may sell on the black market through the dark web if ransoms are not fulfilled. 

The DesignRush investigation utilized information provided by the FBI's Internet Crime Report and IT Governance USA to create its rankings and statistics. IT Governance is a provider of IT governance, risk management, and compliance services located in New York City. 

In addition to a significantly high rate of cybercrime, Nevada recorded “moderate data breaches” at a rate of 0.25 per 100K individuals. Data breaches include leaks of governmental and public information, with rates modified based on population. 

The sole area where Nevada performed well in the DesignRush report was in its data protection legislation. Every state received a score ranging from one to six according to the thoroughness of its data privacy regulations. Nevada received five points for implementing a “restrictive law.” 

Final grades were determined by assigning a weight of 70% to cybercrime per capita and data breaches per capita, while data protection laws were weighted at 30%. Nevada’s overall data protection score surpassed only six states: South Carolina, Florida, Arizona, Massachusetts, Alaska, and South Dakota. 

Casino Security Breached 

The roster of recent cyberattacks targeting casinos in Nevada is extensive, but no incident received more media attention than the significant September 2023 attack on the IT infrastructure of MGM Resorts and Caesars International. 

MGM declined to pay the ransom, leading to significant disruptions in its US operations. MGM later disclosed that the cyber incident, which involved "social engineering" tactics where a deceptive individual coerces an employee to obtain unauthorized access to a computer network, resulted in costs exceeding $100 million for the Bellagio operator. 

Caesars opted to pay a ransom of $15 million to swiftly restore its systems.