MGM Resorts Hit by Major 'Cybersecurity Issue,' Impact Widespread Across US

John Lopez, Tech Times 12 September 2023, 08:09 am

MGM Resorts International, one of the leading names in the hospitality and gaming industry, finds itself grappling with a significant "cybersecurity issue."

The ramifications of this digital debacle are already rippling across its vast network, affecting operations from Las Vegas to New York.

Widespread Impact on Operations

The repercussions of the cybersecurity incident became evident as some of MGM's websites went offline late Monday.

To mitigate the issue, NBC News reports that the company has urged customers to resort to the old-fashioned way of booking rooms and making reservations by phone.

Brian Ahern, a spokesperson for MGM Resorts, disclosed that the full extent of the issue remains unknown.

In a reassuring statement issued by the company on Monday evening, MGM Resorts stated, "We continue to work diligently to resolve this issue." The good news is that despite the hiccup, the casino gaming floors are operational.

The Investigation

MGM Resorts has not taken this threat lightly. To protect sensitive data, the company swiftly shut down specific systems.

Moreover, they have initiated an internal investigation, bolstered by collaboration with "leading external cybersecurity experts."

While MGM takes these steps, there is an eerie silence from law enforcement. The FBI in Las Vegas and the Nevada Gaming Control Board have not yet commented on the situation, leaving the public speculating about the origins and motives of this cyber intrusion.

A History of Vulnerability

MGM Resorts has a history of cybersecurity challenges, with a 2019 breach exposing data belonging to millions of hotel and casino guests.

The Register tells us that names, email addresses, phone numbers, addresses, dates of birth, and other sensitive information fell into the wrong hands. High-profile figures like Twitter's Jack Dorsey and pop sensation Justin Bieber were among the victims.

Regulatory Landscape

Cybersecurity has become a paramount concern for businesses, and regulatory bodies have taken note. Last year, Nevada's gaming board introduced stricter cybersecurity measures, including a mandate to report online system breaches within a three-day window.

Similarly, the Securities and Exchange Commission (SEC) imposed rules on large, publicly traded companies. While the SEC's requirement to report significant breaches within four business days will go into effect in December, it underscores the urgency of cybersecurity in the corporate world.

SEC Chair Gary Gensler emphasized, "Whether a company loses a factory in a fire - or millions of files in a cybersecurity incident - it may be material to investors."

Guest Impact and Reassurance

The fallout from the incident is not limited to MGM's digital realm. Guests at MGM properties, including iconic venues like Aria, Bellagio, Luxor, MGM Grand, and Mandalay Bay in Las Vegas, have reported disruptions.

These include issues with ATM and credit card machines, digital room keys, and even slot machines.

However, MGM Resorts sought to reassure its guests, stating that its resorts "continue to deliver the experiences for which MGM is known," encompassing dining, entertainment, and gaming. The front desk staff remains available to assist guests.

Stay posted here at Tech Times.