MGM Resorts cyberattack sparked customer data breach, cost the company $100 million
Regulatory filings and a letter from MGM Resorts CEO William Hornbuckle Wednesday claim a recent cyberattack entailed both a leak of customer data as well as a hefty financial hit to the company.
Hornbuckle attempted to downplay just how severe the data break was, however.
“We have determined that because of our fast, early response, the incident did not result in a compromise of any customer bank account numbers or payment card information,” Hornbuckle said in a public letter. “We do understand that the criminal actors obtained certain personal information belonging to some customers who transacted with us prior to March 2019.”
Hackers obtained data like customer names, contact information, date of birth, gender and driver’s license numbers. A “more limited number” of Social Security numbers and passport numbers were also hacked during the attack, Hornbuckle wrote.
“We have no evidence that the criminal actors have used this data to commit identity theft or account fraud,” he added.
Hornbuckle noted the company shut down IT systems to mitigate the risk of any widespread data leak and worked with federal law enforcement and external cybersecurity experts on investigating the attack.
The company did not pay off hackers demanding a ransom like Caesars Entertainment did weeks prior to the MGM cybersecurity issue, the Wall Street Journal reported this week.
While the Federal Bureau of Investigation discourages companies from paying cyber hackers a ransom, Caesars is believed to have paid roughly $15 million in ransom. The company claims its operations weren’t impacted, per earlier WSJ reporting.
But Caesars did note in a September regulatory filing that hackers “acquired a copy of, among other data, our loyalty program database, which includes driver’s license numbers and/or social security numbers for a significant number of members in the database.”
The Caesars filing last month emphasized there was “no evidence to date that any member passwords/PINs, bank account information, or payment card information (PCI) were acquired by the unauthorized actor.”
MGM’s fallout
Social media reports in recent weeks depicted a state of bedlam at MGM Resorts, ranging from shutdown slot machines to manual credit card processing, following the cyberattack.
The CEO’s letter Wednesday claims “the vast majority of our systems have been restored.”
But a filing with the U.S. Securities and Exchange Commission indicates the attack likely caused the company to take a $100 million hit. The MGM Resorts filing attributes much of this to guests changing or canceling reservations during the month of September, which had an 88% occupancy rate across the company this year compared to 93% in 2022.
The company expects occupancy rates across its resorts to be 93% in October, slightly down from the 94% seen the same month last year, but then fully recover in November.
The SEC filing reiterated the company believed the “unauthorized third-party activity” is now contained.
What to do if your personal information was stolen at MGM or Caesars
Hornbuckle indicated customers whose data was comprised in the cyberattack will have been notified via email. MGM Resorts is offering free credit monitoring and free identity protection services to those impacted.
The company also established a dedicated call center at 1-800-621-9437 that can be reached Monday through Friday from 9 a.m. until 11 p.m. EST and from 11 a.m. until 8 p.m. on Saturdays and Sundays. Those who dial in should reference number B105892 when calling.
There is also a dedicated website outlining additional information of the cyberattack and steps to take to protect personal information, including remaining alert for unsolicited communications involving personal information and monitoring credit reports for potential fraud.
While Caesars claims its operations were back to normal, the company still indicated it would notify customers “in the coming weeks” impacted by its own data breach.
If you aren’t sure if you were impacted, you can reach out to a dedicated response line for Caesars at 1-888-652-1580 from 9:00 a.m. to 9:00 p.m. EST, Monday through Friday other than on holidays.
What about Marriott?
The timing of the MGM Resorts cyberattack arrived weeks ahead of the planned launch month of a new partnership between the casino conglomerate and Marriott International.
The new deal, replacing a prior partnership between MGM and Hyatt, was expected to be a deeper relationship involving a new collection brand as well as tie-ins to the BetMGM online betting and gaming platform.
It is unclear if the cyberattack pushed back the planned October launch of the MGM Collection with Marriott Bonvoy. Representatives with Marriott did not respond to TPG's request for comment in time for publication.
But it certainly appears MGM is ready to at least be back to normal in November in time for the Formula 1 Las Vegas Grand Prix.
“The Company believes it is well-positioned to have a strong fourth quarter, with record results expected in November primarily driven by Formula 1,” reads the MGM Resorts SEC filing from Wednesday.
Related reading:
- Best hotel credit cards
- When is the best time to book a hotel? Experts weigh in — and debunk a few myths
- The best credit cards to reach elite status
- A comparison of luxury hotel programs from credit card issuers
- Which credit cards offer the most lucrative rewards for hotel stays?
- The best hotel rewards programs in the world
TPG featured card
Rewards
| 4X | Earn 4X Membership Rewards® points per dollar spent on purchases at restaurants worldwide, on up to $50,000 in purchases per calendar year, then 1X points for the rest of the year. |
| 4X | Earn 4X Membership Rewards® points per dollar spent at US supermarkets, on up to $25,000 in purchases per calendar year, then 1X points for the rest of the year. |
| 3X | Earn 3X Membership Rewards® points per dollar spent on flights booked directly with airlines or on AmexTravel.com. |
| 2X | Earn 2X Membership Rewards® points per dollar spent on prepaid hotels and other eligible purchases booked on AmexTravel.com. |
| 1X | Earn 1X Membership Rewards® point per dollar spent on all other eligible purchases. |
Intro offer
Annual Fee
Recommended Credit
Why We Chose It
There’s a lot to love about the Amex Gold. It’s a fan favorite thanks to its fantastic bonus-earning rates at restaurants worldwide and at U.S. supermarkets. If you’re hitting the skies soon, you’ll also earn bonus Membership Rewards points on travel. Paired with up to $120 in Uber Cash annually (for U.S. Uber rides or Uber Eats orders, card must be added to Uber app and you can redeem with any Amex card), up to $120 in annual dining statement credits to be used with eligible partners, an up to $84 Dunkin’ credit each year at U.S. Dunkin Donuts and an up to $100 Resy credit annually, there’s no reason that foodies shouldn’t add the Amex Gold to their wallet. These benefits alone are worth more than $400, which offsets the $325 annual fee on the Amex Gold card. Enrollment is required for select benefits. (Partner offer)Pros
- 4 points per dollar spent on dining at restaurants worldwide and U.S. supermarkets (on the first $50,000 in purchases per calendar year; then 1 point per dollar spent thereafter and $25,000 in purchases per calendar year; then 1 point per dollar spent thereafter, respectively)
- 3 points per dollar spent on flights booked directly with the airline or with amextravel.com
- Packed with credits foodies will enjoy
- Solid welcome bonus
Cons
- Not as useful for those living outside the U.S.
- Some may have trouble using Uber and other dining credits
- You may be eligible for as high as 100,000 Membership Rewards® Points after you spend $6,000 in eligible purchases on your new Card in your first 6 months of Card Membership. Welcome offers vary and you may not be eligible for an offer. Apply to know if you’re approved and find out your exact welcome offer amount – all with no credit score impact. If you’re approved and choose to accept the Card, your score may be impacted.
- Earn 4X Membership Rewards® points per dollar spent on purchases at restaurants worldwide, on up to $50,000 in purchases per calendar year, then 1X points for the rest of the year.
- Earn 4X Membership Rewards® points per dollar spent at US supermarkets, on up to $25,000 in purchases per calendar year, then 1X points for the rest of the year.
- Earn 3X Membership Rewards® points per dollar spent on flights booked directly with airlines or on AmexTravel.com.
- Earn 2X Membership Rewards® points per dollar spent on prepaid hotels and other eligible purchases booked on AmexTravel.com.
- Earn 1X Membership Rewards® point per dollar spent on all other eligible purchases.
- $120 Uber Cash on Gold: Add your Gold Card to your Uber account and get $10 in Uber Cash each month to use on orders and rides in the U.S. when you select an American Express Card for your transaction. That’s up to $120 Uber Cash annually. Plus, after using your Uber Cash, use your Card to earn 4X Membership Rewards® points for Uber Eats purchases made with restaurants or U.S. supermarkets. Point caps and terms apply.
- $84 Dunkin' Credit: With the $84 Dunkin' Credit, you can earn up to $7 in monthly statement credits after you enroll and pay with the American Express® Gold Card at U.S. Dunkin' locations. Enrollment is required to receive this benefit.
- $100 Resy Credit: Get up to $100 in statement credits each calendar year after you pay with the American Express® Gold Card to dine at U.S. Resy restaurants or make other eligible Resy purchases. That's up to $50 in statement credits semi-annually. Enrollment required.
- $120 Dining Credit: Satisfy your cravings, sweet or savory, with the $120 Dining Credit. Earn up to $10 in statement credits monthly when you pay with the American Express® Gold Card at Grubhub, The Cheesecake Factory, Goldbelly, Wine.com, and Five Guys. Enrollment required.
- Explore over 1,000 upscale hotels worldwide with The Hotel Collection and receive a $100 credit towards eligible charges* with every booking of two nights or more through AmexTravel.com. *Eligible charges vary by property.
- No Foreign Transaction Fees.
- Annual Fee is $325.
- Terms Apply.
Rewards Rate
| 4X | Earn 4X Membership Rewards® points per dollar spent on purchases at restaurants worldwide, on up to $50,000 in purchases per calendar year, then 1X points for the rest of the year. |
| 4X | Earn 4X Membership Rewards® points per dollar spent at US supermarkets, on up to $25,000 in purchases per calendar year, then 1X points for the rest of the year. |
| 3X | Earn 3X Membership Rewards® points per dollar spent on flights booked directly with airlines or on AmexTravel.com. |
| 2X | Earn 2X Membership Rewards® points per dollar spent on prepaid hotels and other eligible purchases booked on AmexTravel.com. |
| 1X | Earn 1X Membership Rewards® point per dollar spent on all other eligible purchases. |
Intro Offer
You may be eligible for as high as 100,000 Membership Rewards® Points after spending $6,000 in eligible purchases on your new Card in your first 6 months of Membership. Welcome offers vary and you may not be eligible for an offer.As High As 100,000 points. Find Out Your Offer.Annual Fee
$325Recommended Credit
Credit ranges are a variation of FICO® Score 8, one of many types of credit scores lenders may use when considering your credit card application.Excellent to Good
Why We Chose It
There’s a lot to love about the Amex Gold. It’s a fan favorite thanks to its fantastic bonus-earning rates at restaurants worldwide and at U.S. supermarkets. If you’re hitting the skies soon, you’ll also earn bonus Membership Rewards points on travel. Paired with up to $120 in Uber Cash annually (for U.S. Uber rides or Uber Eats orders, card must be added to Uber app and you can redeem with any Amex card), up to $120 in annual dining statement credits to be used with eligible partners, an up to $84 Dunkin’ credit each year at U.S. Dunkin Donuts and an up to $100 Resy credit annually, there’s no reason that foodies shouldn’t add the Amex Gold to their wallet. These benefits alone are worth more than $400, which offsets the $325 annual fee on the Amex Gold card. Enrollment is required for select benefits. (Partner offer)Pros
- 4 points per dollar spent on dining at restaurants worldwide and U.S. supermarkets (on the first $50,000 in purchases per calendar year; then 1 point per dollar spent thereafter and $25,000 in purchases per calendar year; then 1 point per dollar spent thereafter, respectively)
- 3 points per dollar spent on flights booked directly with the airline or with amextravel.com
- Packed with credits foodies will enjoy
- Solid welcome bonus
Cons
- Not as useful for those living outside the U.S.
- Some may have trouble using Uber and other dining credits
- You may be eligible for as high as 100,000 Membership Rewards® Points after you spend $6,000 in eligible purchases on your new Card in your first 6 months of Card Membership. Welcome offers vary and you may not be eligible for an offer. Apply to know if you’re approved and find out your exact welcome offer amount – all with no credit score impact. If you’re approved and choose to accept the Card, your score may be impacted.
- Earn 4X Membership Rewards® points per dollar spent on purchases at restaurants worldwide, on up to $50,000 in purchases per calendar year, then 1X points for the rest of the year.
- Earn 4X Membership Rewards® points per dollar spent at US supermarkets, on up to $25,000 in purchases per calendar year, then 1X points for the rest of the year.
- Earn 3X Membership Rewards® points per dollar spent on flights booked directly with airlines or on AmexTravel.com.
- Earn 2X Membership Rewards® points per dollar spent on prepaid hotels and other eligible purchases booked on AmexTravel.com.
- Earn 1X Membership Rewards® point per dollar spent on all other eligible purchases.
- $120 Uber Cash on Gold: Add your Gold Card to your Uber account and get $10 in Uber Cash each month to use on orders and rides in the U.S. when you select an American Express Card for your transaction. That’s up to $120 Uber Cash annually. Plus, after using your Uber Cash, use your Card to earn 4X Membership Rewards® points for Uber Eats purchases made with restaurants or U.S. supermarkets. Point caps and terms apply.
- $84 Dunkin' Credit: With the $84 Dunkin' Credit, you can earn up to $7 in monthly statement credits after you enroll and pay with the American Express® Gold Card at U.S. Dunkin' locations. Enrollment is required to receive this benefit.
- $100 Resy Credit: Get up to $100 in statement credits each calendar year after you pay with the American Express® Gold Card to dine at U.S. Resy restaurants or make other eligible Resy purchases. That's up to $50 in statement credits semi-annually. Enrollment required.
- $120 Dining Credit: Satisfy your cravings, sweet or savory, with the $120 Dining Credit. Earn up to $10 in statement credits monthly when you pay with the American Express® Gold Card at Grubhub, The Cheesecake Factory, Goldbelly, Wine.com, and Five Guys. Enrollment required.
- Explore over 1,000 upscale hotels worldwide with The Hotel Collection and receive a $100 credit towards eligible charges* with every booking of two nights or more through AmexTravel.com. *Eligible charges vary by property.
- No Foreign Transaction Fees.
- Annual Fee is $325.
- Terms Apply.