Skip to content

MGM Resorts

Disclosed May 29, 20224 years ago24,842,001 accountsUnverified

In July 2019, MGM Resorts discovered a data breach of one of their cloud services . The breach included 10.6M guest records with 3.1M unique email addresses stemming back to 2017. In May 2022, a superset of the data totalling almost 25M unique email addresses across 142M rows was extensively shared on Telegram . On analysis, it's highly likely the data stems from the same incident with 142M records having been discovered for sale on a dark web marketplace in mid-2020 . The exposed data included email and physical addresses, names, phone numbers and dates of birth.

What is known

People affected24,842,001 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMay 29, 2022
HappenedJul 25, 2019
AttackNot stated
Data exposedDates of birth, Emails, Names, Phone numbers, Addresses
SectorTech · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: MGM Resorts (2022 Update)haveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataMay 29, 202224,842,001

Other breaches at MGM Resorts

BreachAffected
Social engineering and ransomware attack disrupts MGM casinos and steals customer dataSep 12, 20233 years agoRansomwareUnknown
Details of 10.6 million MGM hotel guests from 2019 breach posted on forumFeb 19, 20206 years agoHackingUnverified11M
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about MGM Resorts

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.