MGM Resorts International

MGM Resorts International suffered a ransomware attack in September 2023, significantly disrupting operations across its Las Vegas properties. The digital systems for managing casinos and hotels were incapacitated, preventing credit card transactions and forcing guests to seek alternative accommodations. Staff had to manually compute slot machine outcomes due to the systems' unavailability. Over 37 million customers and a trove of business information were affected, and hackers associated with the BlackCat/Alphv gang later claimed responsibility. The incident led to a substantial financial loss for the company, estimated at about $100 million, and triggered a sequence of class action lawsuits resulting in a $45 million settlement.

Source: https://therecord.media/trump-admin-ends-ftc-ransomware-case

TPRM report: https://scoringcyber.rankiteo.com/company/mgm-resorts-international

"id": "mgm906031025",
"linkid": "mgm-resorts-international",
"type": "Ransomware",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': '37 million',
                        'industry': 'Hospitality',
                        'location': 'Las Vegas',
                        'name': 'MGM Resorts International',
                        'type': 'Company'}],
 'data_breach': {'number_of_records_exposed': '37 million'},
 'date_detected': 'September 2023',
 'description': 'MGM Resorts International suffered a ransomware attack in '
                'September 2023, significantly disrupting operations across '
                'its Las Vegas properties. The digital systems for managing '
                'casinos and hotels were incapacitated, preventing credit card '
                'transactions and forcing guests to seek alternative '
                'accommodations. Staff had to manually compute slot machine '
                "outcomes due to the systems' unavailability. Over 37 million "
                'customers and a trove of business information were affected, '
                'and hackers associated with the BlackCat/Alphv gang later '
                'claimed responsibility. The incident led to a substantial '
                'financial loss for the company, estimated at about $100 '
                'million, and triggered a sequence of class action lawsuits '
                'resulting in a $45 million settlement.',
 'impact': {'data_compromised': '37 million customers and business information',
            'financial_loss': '$100 million',
            'legal_liabilities': '$45 million settlement',
            'operational_impact': 'Significant disruption of operations',
            'systems_affected': 'Digital systems for managing casinos and '
                                'hotels'},
 'regulatory_compliance': {'legal_actions': 'Class action lawsuits'},
 'threat_actor': 'BlackCat/Alphv gang',
 'title': 'MGM Resorts International Ransomware Attack',
 'type': 'Ransomware Attack'}