HIT d.d. Nova Gorica began restoring operations at six casinos in Slovenia on August 28, 2026, after a cyberattack detected during the night of August 24–25 hit its servers and technology infrastructure.
The disruption forced the temporary closure of Perla, Park and Casinò Drive-in in Nova Gorica; Mond in Šentilj; Korona in Kranjska Gora; and Casinò Fontana in Rogaška Slatina. Associated hotels remained open, although with limited services. Casino Larix and HIT Alpinea continued operating normally.
HIT activated internal teams, external specialists and a forensic investigation, while also notifying the competent authorities. By the end of August, the group had not publicly identified the attacker or confirmed ransomware, a ransom demand, a data breach, the number of affected customers or the financial losses caused by the incident.
The first property to return was Perla, Resort & Entertainment, during the night of August 27–28. The initial reopening was mainly limited to slot machines, while the company continued restoring applications linked to table games, hotels and corporate processes.
Sandi Brataševec
The company is led by Sandi Brataševec, President of the Management Board. The board also includes Danjel Mlečnik, Damjana Luin and Alan Bofulin, while the Supervisory Board is chaired by Savo Tatalovič.
HIT, headquartered in Nova Gorica, has share capital of approximately €28.33 million and employs more than 1,700 people. In 2025, the group reported €180.4 million in operating revenue and €6.7 million in net profit; the parent company generated €153.3 million in revenue and €4.1 million in net profit. Its largest shareholder is Slovenian Sovereign Holding, with around 28.5%, followed by Kapitalska družba at about 20.3%, MSIN at 13.8%, and the Municipality of Nova Gorica at roughly 13.3%.
HIT has not yet disclosed how much it will invest in strengthening cybersecurity or the total financial impact of the shutdown. Brataševec did confirm that IT infrastructure and cybersecurity will become a strategic investment priority following the attack.
