MGM Resorts takes action over massive data hack

More than 10.6million guests have had their data leaked after the cyber attack, according to reports.

MGM Resorts has properties in Las Vegas and across the US.
MGM Resorts has properties in Las Vegas and across the US.

The stolen personal information of 10.6 million guests of MGM Resorts hotels was posted to a hacking forum this week, according to reports.

Last night an MGM Resorts official confirmed to C&IT that there had been a data hack last summer. The data exposed included names, addresses and passport numbers of previous guests.

The company said it was "confident" no financial information had been exposed but could not confirm exactly how many people had been affected because the data that was exposed may have been duplicated.

In a statement handed to C&IT, an MGM Resorts spokesperson said: “Last summer, we discovered unauthorised access to a cloud server that contained a limited amount of information for certain previous guests of MGM Resorts. 

“We are confident that no financial, payment card or password data was involved in this matter. MGM Resorts promptly notified guests potentially impacted by this incident in accordance with applicable state laws.

“Upon discovering the issue, the company retained two leading cybersecurity forensics firms to assist with its internal investigation, review and remediation of the issue.

“At MGM Resorts, we take our responsibility to protect guest data very seriously, and we have strengthened and enhanced the security of our network to prevent this from happening again.”

Celebrities including Justin Bieber and Twitter founder Jack Dorsey were among those affected, according to a report from ZDNet. But these leaks have not been confirmed by MGM. 

Much of the data that was stolen was "phonebook" information such as names, telephone numbers and email addresses, which MGM said was already available publicly.

Around 1,300 former guests were notified that more sensitive information including passport numbers had been revealed, it has been reported. 

Some 52,000 customers were told that less sensitive personal information was exposed, according to the BBC, though this was only part of the number affected. 

MGM resorts are in Las Vegas, Atlantic City and Detroit in the US, but also has properties in China and Japan and is developing a new Dubai resort.

In 2017, Marriott Hotels was on the end of a much larger data breach exposing 500 million guests, linked to alleged Chinese state-sponsored hackers.

MGM did not immediately respond when asked to confirm whether the details of the ZDnet report were completely accurate.

For more features and breaking news sign up to C&IT Magazine's daily Newstracker.

Have you registered with us yet?

Register now to enjoy more articles
and free email bulletins.

Register now
Already registered?
Sign in

Andrew McCorkell recommends

Marriott suffers mass data hack

Read more

Trio of agencies to run events at Birmingham 2022 Commonwealth Games

Trio of agencies to run events at Birmingham 2022 Commonwealth Games

DRPG, TBA and Outdoor Places Unusual Spaces among the companies running creative services for the international event.

Event planners need to rethink how they pitch for business

Event planners need to rethink how they pitch for business

Organisers have found new ways to engage with clients and keep in regular contact when events aren't taking place.

Fairmont posts funny videos of staff in empty hotels

Fairmont posts funny videos of staff in empty hotels

Two Canadian Fairmont hotels have found a creative outlet for talented staff members during the lockdown.

LIVE UPDATES: Spain to welcome overseas visitors from 1 July

LIVE UPDATES: Spain to welcome overseas visitors from 1 July

Find out which countries are on partial or national lockdown, what travel restrictions are in place and what size gatherings are allowed.

BVEP elects new chairperson

BVEP elects new chairperson

The Business Visits & Events Partnership has also set up a new executive committee to advocate for the industry.

'The industry needs strong leadership on sustainable change'

'The industry needs strong leadership on sustainable change'

Getting back to business as usual is no longer an option, says Selina Donald, founder of The Bulb.

Why online conferences are great for introverts

Why online conferences are great for introverts

The switch to digital events has been a bonus for less outgoing types, says founder of SaaStock.

One week to enter the C&IT Awards Americas

One week to enter the C&IT Awards Americas

As C&IT expands its reach globally, we've launched the C&IT Awards Americas to recognise the best in US events.

Drive-in cinemas could have a starring role in the return to live experiences

Drive-in cinemas could have a starring role in the return to live experiences

A socially distanced return to live events could see people being entertained from the comfort of their cars.

‘I’ve been mourning my old life’

‘I’ve been mourning my old life’

Event planner and founder of The Professional Retreat reflects on how being furloughed and in lockdown has changed her world view.