Hack of MGM hotels may have exposed personal data of more than 142 MILLION guests

Hack of MGM hotels may have exposed personal data of 142 MILLION guests – more than TEN TIMES the number previously reported

  • A hack last year of MGM may be much larger than previously thought
  • Hackers are selling personal data from more than 142 million guests
  • Previous reports pegged the figure at about 10.6 million guests
  • The trove of data could still be as large as 200 million people 

A hack of MGM hotels may have affected more than 142 million guests.

According to a report from ZDNet, new information surfaced this week suggesting that the 10.6 million guests previously reported in February was vastly underestimated. 

The new figure comes from an ad placed on a dark web which is offering the stolen data for $2,900. It says that the trove of stolen information contains 142,479,937 MGM hotel guests.

MGM Resorts, which has resorts in Detroit, Mississippi, Maryland, and New Jersey as well as the famous Bellagio, Mandalay Bay, MGM Grand and The Mirage, was hit with a breach last year

The data breach had previously come to light in February under similar circumstances when a hacker offered information on 10.6 million MGM hotel guests for free.

Among the people implicated in the breach were Twitter CEO, Jack Dorsey, and Justin Bieber according to prior reports.  

ZDNet verified that there was no financial information in the breach and according to an MGM spokesperson, mostly consisted of, ‘contact information like names, postal addresses, and email addresses.’

MGM says that it has addressed the situation with affected guests, but did not previously report the breadth of the breach at the time. 

‘MGM Resorts was aware of the scope of this previously reported incident from last summer and has already addressed the situation, an MGM spokesperson told ZDNet. 

According to ZDNet, there is still a chance that the breach could be even larger than the 142 million users currently confirmed.

Irina Nesterovsky, Head of Research at threat intel firm KELA told ZDNet that posts offering up data from MGM hotel guests posted on Russian-speaking hacking forums claim to have more than 200 million guests in their trove.