So one thing that strikes me weird about your writeup is you note that the casino hired a firm to investigate the issue, but Sheppard Mullin is a law firm, and would not be doing an investigation like this, they would only be involved in anything legal like making sure forms were correctly filed and legal recourse was investigated and upheld. Your writeup seems to confuse the cybersecurity and investigation firms that they hired with Sheppard.

Overall very interesting but I thought I might point this out as it also appears to be confused in the casinos first linked statement, but not the final one.

I used to work for this firm and they are high, high profile, very expensive and have offices worldwide.