CISO Tribune

Company record

PENN Entertainment CISO: Gary Hunter

CISO Tribune company record: PENN Entertainment, seat filled, since October 28, 2026

The current Chief Information Security Officer of PENN Entertainment, as tracked by CISO Tribune, is Gary Hunter, whose appointment was announced on October 28, 2026 (wsj.com). Previously Chief Information Security Officer at REI. Read the record. The record entered the Wire on .

What PENN Entertainment tells the SEC

Its fiscal 2025 Form 10-K, filed February 26, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer, with oversight by the Audit Committee; the filing names David Lingenfelter as of its filing date. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.

Tracked by the Wire since October 28, 2026 · 1 recorded move · every claim links to a sourced record · Updated

Where PENN Entertainment appears on the record (2)

Every page on CISO Tribune and its network that carries this company, 2 in all.

On the Wire
SEC filing

About PENN Entertainment

CISO Tribune's Leadership Bench files PENN Entertainment under Retail & Consumer and North America. The SEC classifies it under standard industrial classification 7011, Hotels & motels, and EDGAR lists its ticker as PENN. The Wire has one security-leadership move at PENN Entertainment on record, announced on October 28, 2026.

What PENN Entertainment's 10-K says about security governance

PENN Entertainment's fiscal 2025 Form 10-K, filed February 26, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.

  • Top security role, as the filing names it: Chief Information Security Officer.

  • Board oversight: the Audit Committee.

    “The Board's oversight of cybersecurity risk management is supported by the Audit Committee, which regularly interacts with the Company's ERM function, the Company's Chief Technology Officer, other members of management, and relevant management committees and councils, including the Company's Cyber Security Committee.”

  • Frameworks and standards the filing names: NIST (publication not named).

  • Person the filing names: David Lingenfelter, as of February 26, 2026.

    “The Company's Chief Information Security Officer, David Lingenfelter, has served in various roles in information technology and information security for over 25 years, including Security Risk Assessor, Security Policy Development, and Security Architect, as well as serving as Vice President of Information Security and Product Security Officer for large public companies.”

  • Experience of the security leadership, as the filing states it:

    “The Company's Chief Information Security Officer, David Lingenfelter, has served in various roles in information technology and information security for over 25 years, including Security Risk Assessor, Security Policy Development, and Security Architect, as well as serving as Vice President of Information Security and Product Security Officer for large public companies.”

  • Material incidents: the filing states none.

    “To date, we do not believe cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition; however, we could experience a cybersecurity incident that materially affects us in the future.”

Plain-English reading and full text of the filing · the filing on sec.gov

Security leadership timeline

2026-10-28

Gary Hunter named Chief Information Security Officer at PENN Entertainment

PENN Entertainment has appointed Gary Hunter as Chief Information Security Officer.

Security chiefs at other Retail & Consumer organizations

Other organizations CISO Tribune files under Retail & Consumer with a named security chief on record: those in North America first, in alphabetical order from PENN Entertainment onward.

  • Primo Brands: Ravi Thatavarthy, Chief Information Security Officer.

  • Ralph Lauren: John Opala, Chief Information Security Officer.

  • SpartanNash: Brett Hoffman, VP and Chief Information Security Officer.

  • Target: Rich Agostino, Senior Vice President, Chief Information Security Officer & Infrastructure.

  • Toast: Tony Arous, Chief Information Security Officer.

  • Walmart: Jerry R. Geisler III, Executive Vice President and Chief Information Security Officer.

  • AutoNation: Brian Fricke, Chief Information Security Officer (CISO).

  • Coca-Cola: Derek Benz, Senior Vice President and Chief Information Security Officer.

The full Retail & Consumer bench

Questions CISOs ask about PENN Entertainment

Who is the CISO of PENN Entertainment?
Gary Hunter is the current Chief Information Security Officer of PENN Entertainment on CISO Tribune's record, appointed on October 28, 2026.
How many security-leadership moves has CISO Tribune tracked at PENN Entertainment?
CISO Tribune has tracked 1 move at PENN Entertainment since October 28, 2026.
When was Gary Hunter appointed at PENN Entertainment?
Gary Hunter's appointment as Chief Information Security Officer of PENN Entertainment was announced on October 28, 2026, per wsj.com.
Where did Gary Hunter work before becoming Chief Information Security Officer of PENN Entertainment?
The record of the appointment gives Gary Hunter's previous role as Chief Information Security Officer at REI.
Who are the security chiefs at other Retail & Consumer organizations?
On CISO Tribune's record they include Ravi Thatavarthy at Primo Brands, John Opala at Ralph Lauren, Brett Hoffman at SpartanNash and Rich Agostino at Target.
Which board body oversees cybersecurity at PENN Entertainment?
PENN Entertainment's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Audit Committee.

Related guides