Over 142 Million Affected in MGM Resorts Data Breach

Exploit
Credential Compromise
Organization
MGM Resorts
Industry
Travel, Hotel

UPDATE:

Earlier this year, news broke of a data breach that was originally thought to have affected 10.6 million guests of the MGM Resorts as hackers began to offer data as a free download.

According to a new ad listed on the Dark Web, the actual number of guests affected is nearly 14 times higher than the original number. According to the listing reported by ZD Net, data from 142,479,937 guests can be purchased for the equivalent of about $3,000.

MGM Resorts stated to ZD Net that the company is, “aware of the scope of this previously reported incident from last summer and has already addressed the situation." However, the seller mentioned that MGM Resorts did not report the full extent of the initial report as MGM Grand Hotels data was also compromised.

Although the stolen data does not include payment information, the compromised data does include personal information such as names, emails, addresses, phone numbers and dates of birth. This is enough data for cybercriminals to target victims with spear phishing campaigns and further penetrate more opportune networks.

Sources