MGM Resorts

3 breaches35M affected in allTechmgmresorts.com

Social engineering and ransomware attack disrupts MGM casinos and steals customer dataRansomware exposed names, emails, phone numbers, addresses, dates of birth, government IDs and Social Security numbers. Reported to the Delaware DOJ.RansomwareHospitalityUSSep 12, 2023 Breach, details not statedExposed dates of birth, emails, names, phone numbers and addresses.25M accountsTechUSUnverifiedMay 29, 2022 Details of 10.6 million MGM hotel guests from 2019 breach posted on forumHacking exposed dates of birth, emails, names, phone numbers and addresses.Hacking11M affectedHospitalityUSUnverifiedFeb 19, 2020

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages.

source_type2026-09-25

MGM Resorts, 2020-02-19press

source_url2026-09-25

MGM Resorts, 2020-02-19https://www.zdnet.com/article/exclusive-details-of-10-6-million-of-mgm-hotel-guests-posted-on-a-hacking-forum/

sector2026-09-25

MGM Resorts, 2020-02-19hospitality

records_basis2026-09-25

MGM Resorts, 2020-02-19organization

records2026-09-25

MGM Resorts, 2020-02-1910600000

disclosed2026-09-25

MGM Resorts, 2020-02-192020-02-19

discovered2026-09-25

MGM Resorts, 2020-02-192019-07

summary2026-09-25

MGM Resorts, 2020-02-19Personal details of more than 10.6 million MGM Resorts guests, stemming from a 2019 breach of a cloud service, were posted on a hacking forum; MGM confirmed the incident.

title2026-09-25

MGM Resorts, 2020-02-19Details of 10.6 million MGM hotel guests from 2019 breach posted on forum

lawsuit2026-09-25

MGM Resorts, 2023-09-12$45M class action settlement covering the 2019 and 2023 breaches (preliminary approval 2025)

sector2026-09-25

MGM Resorts, 2023-09-12hospitality

attack2026-09-25

MGM Resorts, 2023-09-12ransomware

data_types2026-09-25

MGM Resorts, 2023-09-12["names","emails","phone","addresses","dob","government-id","ssn"]

disclosed2026-09-25

MGM Resorts, 2023-09-122023-09-12

summary2026-09-25

MGM Resorts, 2023-09-12MGM Resorts shut down systems after a cyberattack in September 2023 that disrupted its Las Vegas properties. Its 8-K said attackers obtained personal data of customers who transacted before March 2019, including driver's license numbers and

title2026-09-25

MGM Resorts, 2023-09-12Social engineering and ransomware attack disrupts MGM casinos and steals customer data

Added2026-09-25

MGM Resorts, 2022-05-29

Added2026-09-25

MGM Resorts, 2020-02-19

domain2026-09-25

MGM Resortsmgmresorts.com

Added2026-09-25

MGM Resorts, 2023-09-12

Added2026-09-25

MGM Resorts