Data breach at MGM Resorts expected to cost casino giant $100 million

Oct 6, 2023, 4:04 PM

FILE - The Las Vegas Monorail passes by MGM Grand, April, 27, 2006, in Las Vegas. A “cybersecurit...

FILE - The Las Vegas Monorail passes by MGM Grand, April, 27, 2006, in Las Vegas. A “cybersecurity issue” led to the shutdown of some casino and hotel computer systems at MGM Resorts International properties across the U.S., a company official reported Monday, Sept. 11, 2023. (AP Photo/Jae C. Hong, File)

(AP Photo/Jae C. Hong, File)

NEW YORK (AP) — The data breach last month that MGM Resorts is calling a cyberattack is expected to cost the casino giant more than $100 million, the Las Vegas-based company said in a Thursday regulatory filing.

The incident, which was detected on Sept. 10, led to MGM shutting down some casino and hotel computer systems at properties across the U.S. in efforts to protect data.

MGM said reservations and casino floors in Las Vegas and other states were affected — as customers shared stories on social media about not being able to make credit card transactions, obtain money from cash machines or enter hotel rooms. The company announced the end its 10-day computer shutdown on Sept. 20.

The incident bore all the hallmarks of an extortionary ransomware attack, which MGM has not confirmed. If so, it could be the costliest ransomware attack on record, said Brett Callow of the cybersecurity firm Emsisoft. In 2019, the Norwegian aluminum manufacturer Norsk Hydro suffered $70 million in losses after refusing to pay ranswomare criminals.

“While we experienced disruptions at some of our properties, operations at our affected properties have returned to normal, and the vast majority of our systems have been restored,” MGM CEO Bill Hornbuckle said in a Thursday letter to customers. “We also believe that this attack is contained.”

Cybersecurity ‘issue’ prompts computer shutdowns at MGM Resorts properties across US

Hornbuckle added that no customer bank account numbers or payment card information was compromised in the incident. But hackers stole other personal information — including names, contact information, driver’s license numbers, Social Security numbers and passport numbers belonging to some customers who did business with MGM prior to March of 2019, he said.

MGM has “no evidence” that the hackers and criminal actors have used this data to commit account fraud or identity theft Hornbuckel said, noting that the company will also reach out to impacted consumers via email and offer free identity protection and credit monitoring services. “We regret this outcome and sincerely apologize to those impacted,” he added.

In Thursday’s filing with the Securities and Exchange Commission, MGM said it believes that September’s data breach will have a negative impact on its third-quarter financial results, particularly in Las Vegas — but minimal impact in the fourth quarter and operational results for the year.

In addition to the estimated $100 million loss on adjusted property earnings before interest, taxes, depreciation, amortization and rent for its Las Vegas Strip resorts and other regional operations, MGM expects to incur charges totaling less than $10 million covering one-time expenses like legal fees and technology consulting.

MGM wasn’t the only casino giant to get hit by hackers last month. Caesars Entertainment disclosed a Sept. 7 cyberattack. The Reno-based company said that its casino and online operations were not disrupted.

Normal operations return to MGM Resorts 10 days after cyberattack, casino company says

Caesars was widely reported to have paid $15 million of a $30 million ransom sought by a group called Scattered Spider for a promise to secure the data. According to a Thursday report from The Wall Street Journal, which cited a unnamed person familiar with the matter, MGM refused to pay hackers’ September ransom demand.

MGM did not immediately respond to The Associated Press’ request for further comment.

Beyond the casino world, Clorox disclosed a cyberattack recently — noting the company identified “unauthorized activity” on some of IT systems back in August. The maker of bleach and other household products says the attack has caused wide-scale disruption of operations, including notable product shortages and order processing delays.

In a Wednesday announcement, Clorox said that its net sales are expected to fall between 23% and 28% for the first quarter of 2024.


AP Reporters Frank Bajak, Ken Ritter and Rio Yamat contributed to this report.

KSL 5 TV Live

National News

FILE  -A Ford Bronco is displayed at a Gus Machado Ford dealership on Jan. 23, 2023, in Hialeah, Fl...

Wyatt Grantham-Phillips

Ford recalls over 456,000 Bronco Sport and Maverick cars due to loss of drive power risk

Ford is recalling more than 456,000 Bronco Sport and Maverick vehicles due to a battery detection issue that can result in loss of drive power, increasing crash risks.

1 hour ago

Melatonin use can be especially dangerous in children and should only be used after consulting a pe...

Sandee LaMotte

Melatonin industry asked to voluntarily tighten standards after dramatic rise in childhood ER visits

A March 2024 report from the CDC discovered some 11,000 children had been seen in emergency rooms between 2019 and 2022 after ingesting melatonin while unsupervised.

2 hours ago

FILE - An Alaska Airlines aircraft sits in the airline's hangar at Seattle-Tacoma International Air...

Associated Press

Alaska Airlines briefly grounds flights due to technical issue

Alaska Airlines briefly grounded all flights Wednesday due to a technical issue.

2 hours ago

In this handout photo provided by Disneyland Resort, a view of Sleeping Beauty Castle in Disneyland...

Amy Taxin

Southern California city council gives a key approval for Disneyland expansion plan

Disney has received a key approval to expand its theme park offerings in California as it seeks to build new, immersive lands for visitors.

2 hours ago

FILE - Bonneville International was recognized on Tuesday for its fundraising efforts during and af...

Mark Jones

Bonneville International recognized for its ‘Maui Strong’ fundraising efforts

Bonneville International has been recognized with the National Association of Broadcasters Service to America Award for its "Maui Strong" fundraising campaign, as announced Tuesday.

19 hours ago

FILE - MyPillow chief executive Mike Lindell talks to reporters at the Republican National Committe...

Steve Karnowski, Associated Press

Supreme Court won’t hear Mike Lindell’s challenge over FBI seizure of cellphone

The U.S. Supreme Court has denied a petition by MyPillow founder and election denier Mike Lindell to consider his challenge to the legality of the FBI’s seizure of his cellphone at a Minnesota restaurant drive-through.

20 hours ago

Sponsored Articles

Women hold card for scanning key card to access Photocopier Security system concept...

Les Olson

Why Printer Security Should Be Top of Mind for Your Business

Connected printers have vulnerable endpoints that are an easy target for cyber thieves. Protect your business with these tips.

Modern chandelier hanging from a white slanted ceiling with windows in the backgruond...

Lighting Design

Light Up Your Home With These Top Lighting Trends for 2024

Check out the latest lighting design trends for 2024 and tips on how you can incorporate them into your home.

Technician woman fixing hardware of desktop computer. Close up....

PC Laptops

Tips for Hassle-Free Computer Repairs

Experiencing a glitch in your computer can be frustrating, but with these tips you can have your computer repaired without the stress.

Close up of finger on keyboard button with number 11 logo...

PC Laptops

7 Reasons Why You Should Upgrade Your Laptop to Windows 11

Explore the benefits of upgrading to Windows 11 for a smoother, more secure, and feature-packed computing experience.

Stylish room interior with beautiful Christmas tree and decorative fireplace...

Lighting Design

Create a Festive Home with Our Easy-to-Follow Holiday Prep Guide

Get ready for festive celebrations! Discover expert tips to prepare your home for the holidays, creating a warm and welcoming atmosphere for unforgettable moments.

Battery low message on mobile device screen. Internet and technology concept...

PC Laptops

9 Tips to Get More Power Out of Your Laptop Battery

Get more power out of your laptop battery and help it last longer by implementing some of these tips from our guide.

Data breach at MGM Resorts expected to cost casino giant $100 million