Slovenia’s HIT Group begins reopening casinos after cyberattack

HIT Group, Slovenia’s largest casino operator, has started bringing venues back online after restoring parts of the IT systems hit in a cyberattack detected overnight on 24–25 August. For high-risk operators, the useful detail is not the headline outage itself, but the knock-on effect: payments, cash registers, hotel reception systems, and the basic mechanics of running a casino floor all depend on the same infrastructure.

1. HIT temporarily suspended operations at six casinos in Slovenia: Perla, Park, Casino Drive-in, Mond, Korona, and Casino Fontana. The hotels connected to those casinos stayed open, but with limited services while the disruption lasted.
2. The incident also affected internal operations. Local media reported cash register failures in the casinos and problems at hotel reception desks while the systems were still down.
3. After detecting the issue, HIT activated specialist teams and began an investigation. The company also informed the relevant government institutions in Slovenia and worked with external cybersecurity experts to restore its digital platforms.
4. HIT said it had reached the technical conditions needed to begin reopening the affected casinos, but did not say whether all six venues would resume at the same time or in stages. That leaves open the practical question of whether some sites came back before others, depending on their internal system status.
5. Not all of HIT’s business was interrupted. Its subsidiaries Casino Larix and HIT Alpinea continued operating normally throughout the incident, allowing the group to keep part of its commercial activity running in Slovenia while the other venues were being repaired.

HIT has disclosed few details about the attack while the investigation is ongoing. The company has not said how attackers gained access to its systems, whether customer information or other data was compromised, or what financial impact the incident may have had.