Capitol - Your Illinois News Radar » *** UPDATED x1 *** Heidner sues Gaming Board after private info leaked to feds
SUBSCRIBE to Capitol Fax      Advertise Here      Mobile Version     Exclusive Subscriber Content     Updated Posts    Contact
To subscribe to Capitol Fax, click here.
*** UPDATED x1 *** Heidner sues Gaming Board after private info leaked to feds

Thursday, Feb 13, 2020

*** UPDATE *** Check out this tidbit in Mark Maxwell’s story

Perhaps ironically, the Gaming Board only discovered the leak of Heidner’s personal information while it was in the process of responding to a FOIA request from Heidner himself. After the businessman grew suspicious that someone at the state gambling agency was unfairly targeting him at the behest of his competitors, he filed several FOIAs seeking “all communications between the IGB and the Tribune” to support his theory.

[ *** End Of Update *** ]

* Press release

Rick Heidner and Gold Rush Amusements, Inc., the victims of a data breach by the Illinois Gaming Board (IGB), filed a lawsuit against the IGB, alleging that their personal and sensitive financial information was intentionally and illegally leaked by an IGB employee. The IGB compounded the harm by failing to promptly notify Mr. Heidner and Gold Rush of the unauthorized disclosures and by taking unfair and improper actions against them, resulting in significant financial and reputational harm.

The lawsuit, filed Tuesday in the Illinois Court of Claims, accuses the IGB of causing substantial harm when an IGB employee intentionally and without authorization disclosed sensitive financial information, including personally identifiable information relating to Gold Rush, Mr. Heidner, his wife, two of his children, and other individuals. The IGB is legally required to keep this data confidential. The complaint, which alleges breach of fiduciary duties and negligence, seeks the maximum allowable damages of $2 million each for Mr. Heidner and Gold Rush.

Approximately half of the more than 50 individual victims of the IGB data breach had previous contact with Mr. Heidner or Gold Rush, a licensed terminal operator serving more than 500 establishments across Illinois. In addition to immediate and extended family members, the victims include individuals with whom Gold Rush has a contractual relationship under the jurisdiction of the IGB.

The IGB delayed notifying Mr. Heidner and the other victims of the unauthorized disclosures for nearly a month. According to the complaint, Mr. Heidner and his family received the IGB’s data breach notices on Jan. 31, well after the IGB discovered the breach on Jan. 3, and a week after the media had reported the breach. The IGB’s failure to promptly notify Mr. Heidner and the other victims and cooperate with them in matters relating to the data breach, as well as its failure to implement and maintain reasonable security measures to protect their private information from unauthorized access and disclosures, violates the Illinois Personal Information Protection Act.

“Despite requiring licensees and associated individuals to hand over a veritable treasure trove of their most sensitive data, the evidence will show that the IGB’s approach to protecting Mr. Heidner’s data has been careless and cavalier, at best,” the complaint states. By leaking confidential, sensitive personal and financial information, “the IGB has breached the trust and confidence that forms the very foundation of the relationship” between the state gaming agency and its licensees, the suit adds.

The unauthorized disclosures by an IGB employee to three federal government entities between Oct. 12-31, 2019, purportedly began the day after the first of a series of articles relating to Mr. Heidner was published in the Chicago Tribune. The Oct. 11 article criticized certain real estate partnerships and implied they were not properly disclosed to the IGB. “Such insinuations were false, in that Mr. Heidner had made complete and accurate disclosures in both Gold Rush’s initial terminal operator license application and in all renewal and related submissions to the IGB,” the suit states.

“These disclosures . . . were made without authorization and were not in response to any valid legal request.” Instead, the suit alleges that an “IGB employee made these unauthorized disclosures to fuel―or at least in response to―negative media coverage the IGB helped generate against Mr. Heidner and Gold Rush.”

Gaming licensees and associated individuals are required to provide the IGB with detailed disclosures of highly confidential personal and financial information. In Mr. Heidner’s case, initially in 2010 and annually since Gold Rush was first licensed in 2012, he has given the IGB information relating to his personal background, social security number, assets, liabilities, personal bank accounts, personal and business investments, real estate holdings, life insurance policies, vehicle ownership, mortgages, and liens, among other details.

The information was leaked―and the unauthorized disclosures were undetected for months―at a time when negative media publicity speculated about the completeness of Gold Rush’s and Mr. Heidner’s disclosures to the IGB, and at a time when the IGB chose to take unfair, unfounded actions against them, according to the complaint. The series of adverse actions without a proper factual basis included, in December, initiating a Disciplinary Complaint, incited by Gold Rush’s competitors, against Gold Rush that seeks the severe penalty of license revocation despite the company’s history of compliance.

On Jan. 3, when the IGB finally discovered the unauthorized disclosures by an employee, it failed to promptly alert Mr. Heidner or Gold Rush that they were victims. A week later, the IGB notified state legislative leaders of the breach but, again, failed to notify the victims. Two weeks after that, the media reported information about the leak, but Mr. Heidner and Gold Rush still were not informed that they were victims. When the media reports caused Mr. Heidner to expressly ask the IGB if he was a victim, the IGB remained silent until Mr. Heidner and his family received formal notices in the mail on Jan. 31.

On Feb. 1, Gold Rush and Mr. Heidner sent a letter to the IGB demanding basic answers regarding the data breach, as well as “an immediate and thorough investigation into the IGB’s role in the orchestrated and public smear campaign” against Mr. Heidner that began in October 2019. On Feb. 7, the IGB responded it could not provide the requested information to Mr. Heidner.

Upon filing the complaint, Mr. Heidner and Gold Rush also referred the matter to Illinois Attorney General Kwame Raoul for further investigation.

* Sun-Times

A Gaming Board spokesman says the agency does not comment on pending litigation and declined to comment on the breach.

This latest legal volley from Heidner comes after the Gaming Board filed a disciplinary action against him in December seeking to revoke his gambling license for allegedly offering up a $5 million “illegal inducement” to the owner of a gambling parlor chain that planned to remove Heidner’s machines. Heidner’s team says it’s all part of a “smear campaign” orchestrated by a competitor with whom he’s also wrangling in civil court.

- Posted by Rich Miller        

  1. - Oak Parker - Thursday, Feb 13, 20 @ 10:30 am:

    Did the feds ask for the info?

  2. - Ron Burgundy - Thursday, Feb 13, 20 @ 11:10 am:

    Both of these things can be true. People may in fact be out to get him, and one set of those people may be the Feds.

  3. - NotRich - Thursday, Feb 13, 20 @ 11:33 am:

    Mr. Heidner loves to omit from his press releases that the IGB has the text messages sent from his phone to a competitor offering a very illegal large inducement.. that alone will sink him

  4. - Frank talks - Thursday, Feb 13, 20 @ 5:01 pm:

    If the Feds were part of it wouldn’t they need a subpoena or warrant?

  5. - Latina - Thursday, Feb 13, 20 @ 10:14 pm:

    Obviously the Feds are on it 😊

  6. - Fizzy Wizzy - Friday, Feb 14, 20 @ 11:59 am:

    No way the Feds would destroy an investigation with illegally obtained evidence. These are rouge actions by nefarious players. I believe Mr. Heidner when he’s talking about a smear campaign. I hope he finds justice here.

Sorry, comments for this post are now closed.

* Pritzker contributes $51.5 million to his "Fair Tax" campaign account
* *** UPDATED x1 *** SUBSCRIBERS ONLY: This just in...
* Reader comments closed for the holiday weekend
* *** UPDATED x3 *** Devore tells reporters he's won both cases
* Question of the day
* 869 new cases, 36 additional deaths, 2.6 percent positivity rate
* *** UPDATED x2 - ILGOP will appeal *** Federal judge denies ILGOP's TRO request: "Granting Plaintiffs the relief they seek would pose serious risks to public health"
* Today's must-watch video
* SUBSCRIBERS ONLY: New ads; More react to Wednesday's edition (password fixed)
* After returning from Florida, Rep. Bailey won't get tested "on the advice of his doctor"
* We're number one... in FBI gun background checks during June
* White Sox vs. Cardinals at Field of Dreams game
* Lightfoot spins tall tale to justify preemptive sweeps
* Well, that escalated quickly
* If you want schools to reopen, wear a mask, keep your distance and wash your hands
* 1.43 million Americans, 45.25 thousand Illinoisans filed new unemployment claims last week
* Open thread
* Yesterday's stories

Visit our advertisers...





Main Menu
Pundit rankings
Subscriber Content
Blagojevich Trial
Updated Posts

July 2020
June 2020
May 2020
April 2020
March 2020
February 2020
January 2020
December 2019
November 2019
October 2019
September 2019
August 2019
July 2019
June 2019
May 2019
April 2019
March 2019
February 2019
January 2019
December 2018
November 2018
October 2018
September 2018
August 2018
July 2018
June 2018
May 2018
April 2018
March 2018
February 2018
January 2018
December 2017
November 2017
October 2017
September 2017
August 2017
July 2017
June 2017
May 2017
April 2017
March 2017
February 2017
January 2017
December 2016
November 2016
October 2016
September 2016
August 2016
July 2016
June 2016
May 2016
April 2016
March 2016
February 2016
January 2016
December 2015
November 2015
October 2015
September 2015
August 2015
July 2015
June 2015
May 2015
April 2015
March 2015
February 2015
January 2015
December 2014
November 2014
October 2014
September 2014
August 2014
July 2014
June 2014
May 2014
April 2014
March 2014
February 2014
January 2014
December 2013
November 2013
October 2013
September 2013
August 2013
July 2013
June 2013
May 2013
April 2013
March 2013
February 2013
January 2013
December 2012
November 2012
October 2012
September 2012
August 2012
July 2012
June 2012
May 2012
April 2012
March 2012
February 2012
January 2012
December 2011
November 2011
October 2011
September 2011
August 2011
July 2011
June 2011
May 2011
April 2011
March 2011
February 2011
January 2011
December 2010
November 2010
October 2010
September 2010
August 2010
July 2010
June 2010
May 2010
April 2010
March 2010
February 2010
January 2010
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
December 2006
November 2006
October 2006
September 2006
August 2006
July 2006
June 2006
May 2006
April 2006
March 2006
February 2006
January 2006
December 2005
April 2005
March 2005
February 2005
January 2005
December 2004
November 2004
October 2004

Blog*Spot Archives
November 2005
October 2005
September 2005
August 2005
July 2005
June 2005
May 2005


RSS Feed 2.0
Comments RSS 2.0

Hosted by MCS SUBSCRIBE to Capitol Fax Advertise Here Mobile Version Contact Rich Miller