Breachesby GlyphMGM Resorts
Disclosed May 29, 202224,842,001 accountsUnverified
In July 2019, MGM Resorts discovered a data breach of one of their cloud services . The breach included 10.6M guest records with 3.1M unique email addresses stemming back to 2017. In May 2022, a superset of the data totalling almost 25M unique email addresses across 142M rows was extensively shared on Telegram . On analysis, it's highly likely the data stems from the same incident with 142M records having been discovered for sale on a dark web marketplace in mid-2020 . The exposed data included email and physical addresses, names, phone numbers and dates of birth.
What is known
| People affected | 24,842,001 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | May 29, 2022 |
| Happened | Jul 25, 2019 |
| Attack | Not stated |
| Data exposed | Dates of birthEmailsNamesPhone numbersAddresses |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
Other breaches at MGM Resorts
Social engineering and ransomware attack disrupts MGM casinos and steals customer dataRansomware exposed names, emails, phone numbers, addresses, dates of birth, government IDs and Social Security numbers. Reported to the Delaware DOJ.RansomwareHospitalityUSSep 12, 2023Details of 10.6 million MGM hotel guests from 2019 breach posted on forumHacking exposed dates of birth, emails, names, phone numbers and addresses.Hacking11M affectedHospitalityUSUnverifiedFeb 19, 2020
History of this record
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.