On August 7, 2026, the U.S. District Court for the Eastern District of Pennsylvania ruled on a motion to dismiss in Volio v. Rush Street Gaming LLC et al., case No. 2:25-cv-00039-JDW. The court allowed the plaintiffs’ negligence claim to continue, dismissed their other causes of action and left requests for declaratory and injunctive relief in place at this stage. That procedural ruling was not a decision that Rivers was liable.
The ruling also did not certify a settlement class, approve a settlement, set compensation or a deadline, appoint a settlement administrator or authorise a claim form. Research checked through August 28, 2026 found no official Rivers Casino Philadelphia data-breach settlement or court-approved claim form. Treat any form as unverified until its details match the federal court docket.
What the August 7 ruling actually decided
The August 7 memorandum, filed as ECF No. 45, addressed whether the plaintiffs had pleaded legally sufficient claims for the case to continue. The court allowed the negligence claim to proceed while dismissing the other causes of action. It also declined to dismiss the plaintiffs’ requests for declaratory and injunctive relief at this stage. Those requests are possible remedies, not compensation already awarded to affected people.
Surviving a motion to dismiss does not prove the allegations, decide liability or guarantee that the plaintiffs will ultimately succeed. It means only that the remaining claim may continue through later stages of the case. The accompanying order and every entry filed after August 7 should be checked in PACER immediately before relying on the case’s status.
Why this is not a settlement or a claim-form ruling
A court-approved class settlement normally leaves a clear trail in the docket. Depending on the stage, that may include a proposed settlement agreement, a motion and order for preliminary approval, a defined settlement class, an approved notice, a named administrator, deadlines and instructions for submitting or excluding a claim. A later final-approval process may follow. None of that was created by the August 7 motion-to-dismiss ruling.
The ruling did not establish a settlement fund, decide who would qualify, assign payment amounts or authorise a settlement website. A law firm’s client-intake questionnaire, a credit-monitoring enrolment page or a casino form for an unrelated matter—such as a lost ticket—is not a court-approved settlement claim form. An unsolicited form could be advertising, legal intake or phishing, but it should not automatically be labelled fraudulent without checking what it is.
What the official breach notice says
The breach notification submitted to the California Attorney General identifies Rivers Casino Philadelphia and says an unauthorised actor accessed or took files from its systems between October 14 and October 22, 2024. The information involved varied by recipient. The displayed notification example identifies a name together with passport and/or taxpayer-identification information, but that does not mean every recipient had the same information involved.
Keep the scope precise. The official notice concerns Rivers Casino Philadelphia and the people described in its notification records. It does not establish that every Rivers property, every BetRivers system or every Pennsylvania online-casino customer was affected. Descriptions in the complaint or court memorandum concerning alleged misuse remain allegations unless established through evidence or a later ruling.
How to verify a supposed claim form
First, record the sender, full website address and every case detail without opening attachments or signing in through the message. Navigate independently to the Eastern District of Pennsylvania’s PACER access page and locate Volio v. Rush Street Gaming LLC et al., No. 2:25-cv-00039-JDW. Check whether the docket contains a preliminary-approval order and an approved notice naming the same administrator, website, eligibility rules and deadline shown in the message.
Do not rely on a familiar logo, a search advertisement or a case number printed on the form. Confirm that the website address matches the address in a filed court document, contact the administrator through independently verified details and never pay a fee to submit a settlement claim. A request for gift cards, cryptocurrency, remote access to your device, login credentials or an advance payment is a strong reason to stop. Preserve the email or text, envelope, URL, screenshots and attachments in case you need to report it.
What to do if you already entered information
If you disclosed a password, change it through the real account or provider website and replace it anywhere else you reused it. If you supplied bank or card information, contact the institution’s fraud department using the number on your card or official statement. IdentityTheft.gov can create an FTC identity-theft report and recovery plan. You can also consider a free fraud alert or place free security freezes separately with Equifax, Experian and TransUnion; a freeze with one bureau does not automatically freeze the other two.
Report suspected fraud through official FTC or Pennsylvania Attorney General channels. The Pennsylvania Gaming Control Board licenses gaming in the Commonwealth and accepts qualifying patron complaints or disputes, but it does not replace the federal docket as the authoritative record for this lawsuit or any future settlement notice. US online-gambling availability and complaint routes are state-specific. This guide is general information, not legal advice. Gambling is 18+ only.
Useful iGaming Centre links
Official context
FAQ
Did the August 7 ruling approve a Rivers Casino data-breach settlement?
No. It allowed one negligence claim to continue and did not approve a settlement, compensation, administrator, deadline or claim form.
How can I check a supposed Rivers Casino settlement claim form?
Match its case number, administrator, website, eligibility rules and deadline to a preliminary-approval order and approved notice in the official PACER docket for case No. 2:25-cv-00039-JDW.
What should I do if I already entered sensitive information?
Change exposed passwords through the real provider site, contact your bank or card issuer if payment details were shared, preserve the message and use official FTC identity-theft and fraud-reporting channels.
