Wynn Resorts takes attacker's word for it that stolen staff data was deleted

Wynn Resorts disclosed that an unauthorized third party (claimed by ShinyHunters) acquired employee personal data—allegedly through a September 2025 breach exploiting an Oracle PeopleSoft vulnerability and a staff credential—then asserted the data was deleted; Wynn says it has seen no evidence of publication or misuse and is offering affected employees credit monitoring while working with external cybersecurity advisors, and security experts warn that attackers' deletion claims are unreliable.