A system that tracks information related to security events in a gaming environment includes a plurality of gaming machines, a database storing data regarding security events, and a security event tracking server in communication with the gaming machines and database. Each gaming machine can have an electronic tracking device adapted to detect wirelessly identifying information from portable electronic devices proximate the gaming machine with respect to the occurrence of a security event at or near the gaming machine. The server includes a processor configured to receive information regarding security events and mobile device identifying information, associate the security events with the identifying information, and store the associated security events and identifying information to the database. Mobile device identifying information can be detected passively without any affirmative input by any user of the mobile devices. Patterns of repeated mobile device detections associated with multiple security events can be determined.