MGM Resorts (2022 Update)
What was exposed
Dates of birthEmail addressesNamesPhone numbersPhysical addresses
What to do if you were affected
- Expect more phishing and spam at this address. Treat messages that reference this company with extra caution.
- Watch for text-message phishing and SIM-swap attempts on your phone number.
- Be wary of targeted scams that use your personal details to sound convincing.
Details
In July 2019, MGM Resorts discovered a data breach of one of their cloud services . The breach included 10.6M guest records with 3.1M unique email addresses stemming back to 2017. In May 2022, a superset of the data totalling almost 25M unique email addresses across 142M rows was extensively shared on Telegram . On analysis, it's highly likely the data stems from the same incident with 142M records having been discovered for sale on a dark web marketplace in mid-2020 . The exposed data included email and physical addresses, names, phone numbers and dates of birth.
Frequently asked questions
What is the MGM Resorts (2022 Update) data breach?
In July 2019, MGM Resorts discovered a data breach of one of their cloud services . The breach included 10.6M guest records with 3.1M unique email addresses stemming back to 2017. In May 2022, a superset of the data totalling almost 25M unique email addresses...
When did the data breach happen?
This data breach occurred around July 2019.
How many accounts were affected?
Around 24,842,001 accounts were affected.
What information was exposed?
Exposed data included Dates of birth, Email addresses, Names, Phone numbers and Physical addresses.
What should I do if I was affected?
Expect more phishing and spam at this address. Treat messages that reference this company with extra caution. Watch for text-message phishing and SIM-swap attempts on your phone number. Be wary of targeted scams that use your personal details to sound convincing.
Related breaches