TLDR
- Churchill Downs and horsemen’s groups sent letters to the FTC asking for an independent review of HISA’s data security.
- The request follows the Marshall Gramm case, where he accessed horse health records he wasn’t authorized to view.
- HISA spent $10.7 million on IT systems in 2025, up 75% from 2023.
- Trainer Angel Quiroz was suspended after three horses tested positive for a banned substance, raising questions about delayed disclosure.
- HISA says it welcomes the FTC’s review and has already been in contact with the agency.
Churchill Downs and several horsemen’s groups have asked the Federal Trade Commission to launch an independent review of the Horseracing Integrity and Safety Authority. The request focuses on how the group handles sensitive data.
The letters came after Marshall Gramm accepted a suspension from HISA. He was accused of accessing health records for horses he did not own over a six week period this year.
Gramm used the information to buy horses entered in claiming races. He also entered several handicapping contests during that time.
The Gramm Case
After HISA made the charges public on August 17, Gramm returned his contest winnings. He also agreed to return any purse money and horses tied to the improper access.
Churchill Downs CEO Bill Carstanjen wrote to FTC Chairman Andrew Ferguson last week. He said the case exposed gaps in how HISA governs itself.
Three days earlier, the National Horsemen’s Benevolent and Protective Association sent its own letter. Two other groups joined that effort, the North America Association of Racetrack Veterinarians and the U.S. Trotting Association.
The horsemen’s letter asked the FTC to require independent audits of HISA’s cybersecurity and finances. They want this done before the authority’s next budget gets approved.
Rising IT Costs Under Scrutiny
HISA spent $10.7 million on IT systems in 2025. That figure is up 75% from the $6.1 million spent in 2023, according to the horsemen’s letter.
The groups argue that spending level should be enough to keep the portal secure. They questioned how Gramm was able to pull large amounts of data without the system catching it.
The issue first surfaced in June when charts built from restricted data appeared on social media. HISA CEO Lisa Lazarus initially denied the information came from the authority’s own database.
Gramm later said he accessed the data through his own portal account by mistake. HISA said he used an automated process to gather it in batches over six weeks.
Churchill Downs and the NHBPA have a history of conflict with HISA. The horsemen’s group opposed the law that created HISA and has been part of court challenges against it.
Churchill Downs previously supported the law but clashed with HISA earlier this year over unpaid fees. That dispute ended up in federal court before the two sides settled in March.
Carstanjen’s letter also raised the “Fair Hill Five” case. That involves horses trained by Angel Quiroz that ran at Monmouth Park and Saratoga last month.
London bookmakers reported unusual betting activity on those horses outside the normal wagering pools. Four of the five horses won their races.
HISA suspended Quiroz this week after three of his horses tested positive for a banned substance. One horse had failed a test in July, but the public did not learn about it until weeks later.
Carstanjen asked why that delay happened, given HISA’s stated goal of transparent reporting. A HISA spokesperson said the authority welcomes the FTC’s review and has already been in touch with the agency about the letters.
Owner Mike Repole also called for a third party review of HISA two weeks ago. He offered to pay for the investigation himself.
