MGM Resorts
Disclosed Feb 19, 20206 years ago10,600,000 affectedUnverified
Details of 10.6 million MGM hotel guests from 2019 breach posted on forum
Personal details of more than 10.6 million MGM Resorts guests, stemming from a 2019 breach of a cloud service, were posted on a hacking forum; MGM confirmed the incident.
What is known
| People affected | 10,600,000 (as reported by the organization) |
|---|---|
| Disclosed | Feb 19, 2020 |
| Discovered | Jul 2019 |
| Happened | Jul 25, 2019 |
| Attack | Hacking |
| Data exposed | Dates of birth, Emails, Names, Phone numbers, Addresses |
| Sector | Hospitality · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: MGM Resortshaveibeenpwned.com · Aggregator | Aggregator |
| Exclusive: Details of 10.6 million MGM hotel guests posted on a hacking forumzdnet.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Feb 19, 2020 | 10,600,000 |
| Have I Been Pwnedaccounts in the data | Feb 20, 2020 | 3,081,321 |
Other breaches at MGM Resorts
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Social engineering and ransomware attack disrupts MGM casinos and steals customer dataSep 12, 20233 years agoRansomware | Sep 12, 20233 years ago | Ransomware | Hospitality | Confirmed | Unknown |
| Disclosed May 29, 2022May 29, 20224 years agoUnverified | May 29, 20224 years ago | Not stated | Tech | Unverified | 25Macct |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/MGM to https://www.zdnet.com/article/exclusive-details-of-10-6-million-of-mgm-hotel-guests-posted-on-a-hacking-forum/ · seed source
- 2026-09-25 · sector: tech to hospitality · seed source
- 2026-09-25 · records_basis: hibp to organization · seed source
- 2026-09-25 · records: 3081321 to 10600000 · seed source
- 2026-09-25 · disclosed: 2020-02-20 to 2020-02-19 · seed source
- 2026-09-25 · discovered: empty to 2019-07 · seed source
- 2026-09-25 · summary: In July 2019, MGM Resorts discovered a data breach of one of their cloud services . The breach included 10.6M guest records with 3.1M unique email addresses stemming back to 2017. The exposed data included email and physical addresses, name to Personal details of more than 10.6 million MGM Resorts guests, stemming from a 2019 breach of a cloud service, were posted on a hacking forum; MGM confirmed the incident. · seed source
- 2026-09-25 · title: empty to Details of 10.6 million MGM hotel guests from 2019 breach posted on forum · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.