70°F
weather icon Partly Cloudy

MGM Resorts sued over data breach affecting up to 10.6M guests

Updated February 22, 2020 - 6:23 pm

A former MGM Resorts International guest is suing the company over a security breach that may have affected up to 10.6 million people.

The company confirmed earlier this week that its cloud server had been hacked over the summer, with certain information — including some guests’ drivers license and passport information — stolen.

MGM customer John Smallman alleges the company failed to protect his personally identifiable information or implement “adequate and reasonable” cybersecurity procedures and protocols. He believes he and other guests will have to spend a significant amount of time and money protecting themselves from fraud, according to a lawsuit filed Friday in U.S. District Court in Nevada.

MGM officials declined to comment for this story and earlier this week declined to confirm the actual number of affected guests because they say the data included many duplicates.

Risk to guests

An MGM spokesman previously said the majority of the information stolen was “phone book” data, information that can be found in a Google search. But the lawsuit said the stolen data included some guests’ license numbers, passport numbers, military identification numbers, phone numbers, emails and dates of birth.

After discovering the security breach, MGM contacted the affected guests and assured them that there was “no evidence” their information had been misused.

But business technology news website ZDNet reported that the stolen information was later posted to a popular internet hacking forum. That put the private data “in the hands of thieves,” according to the lawsuit, and made affected guests subject to identify theft or medical and financial fraud.

Also, the lawsuit said that guests’ information was exposed in July, but affected customers were not notified until September — “depriving them of the ability to promptly mitigate potential adverse consequences” from the data breach.

The lawsuit alleges MGM tried to avoid bringing the matter to public light to hinder any negative publicity, “hoping that the Breach and its inadequate cyber security practices would go unnoticed.”

Not utilizing best practices’

Smallman, a California resident, argues in the lawsuit that he and other affected guests “will forever be at a heightened risk of identity theft and fraud.”

MGM is among many other hospitality companies that have been targeted by hackers, including Marriott, Hyatt and Trump hotels. A 2018 report from information security company Trustwave lists hospitality as one of the top three industries most vulnerable to payment card breaches.

“The hotel industry has been hit with these types of breaches before, and it’s amazing to me when a new one arrives,” John Yanchunis, a lawyer with Morgan & Morgan Complex Litigation Group, told the Review-Journal. The Florida firm filed the lawsuit.

The lawsuit alleges MGM failed to disclose that it did not have a robust computer system and cybersecurity practices, did not take standard and available steps to prevent the hacking, did not monitor and detect the data breach in a timely manner and did not notify Smallman and others of the breach promptly and accurately.

“I expect to discover that the company’s cybersecurity system was not up to par and not utilizing the best practices,” Yanchunis said.

Contact Bailey Schulz at bschulz@reviewjournal.com or 702-383-0233. Follow @bailey_schulz on Twitter.

Don't miss the big stories. Like us on Facebook.
Business Videos
Macy’s to furlough majority of 130,000 employees amid coronavirus closures - VIDEO
On March 30, Macy’s Inc. announced their decision to furlough a majority of their employees and instead move to the “absolute minimum workforce needed.” (Las Vegas Review-Journal
An empty Las Vegas Strip from the air - Drone Video
For the first time in forever, the famed Las Vegas Strip is closed for business amid the coronavirus pandemic. (Michael Quine/Las Vegas Review-Journal)
Nevada construction continues as coronavirus spreads
When Gov. Steve Sisolak ordered Nevada businesses closed, he let construction workers stay on the job, deeming homebuilding and other construction “essential” lines of work.
US weekly jobless claims soar to record-breaking 3.28M - VIDEO
The U.S. Department of Labor released the shattering numbers on Thursday. Jobless claims had been as low as 282,000 the previous week. The 3.28 million jobless claims for last week is more than double the 1.5 million new claims that analysts were expecting. (Las Vegas Review-Journal)
Worker at Allegiant Stadium tests positive for COVID-19
Construction of Allegiant Stadium is unlikely to affected by the coronavirus outbreak that is having an impact on just about every industry across the Las Vegas Valley. (Michael Quine/Las Vegas Review-Journal)
Casino companies burning through millions daily
RJ reporter Bailey Schulz talks about how much Las Vegas Casino companies are losing and how the Emergency bill could help if they run out of money or need help recouping what was lost.
Albertsons, Walmart, Amazon increase pay amid coronavirus impact - VIDEO
Grocery stores and other retailers have raised employee pay as they work to meet customer demand during the coronavirus pandemic. (James Schaeffer / Las Vegas Review-Journal)
Las Vegas police tells nonessential businesses to respect the shutdown - VIDEO
The Las Vegas Metropolitan Police Department reminds businesses in Clark County that all nonessential businesses are to be shut down as mandated by Nevada Gov. Steve Sisolak, due to the coronavirus crises. (Las Vegas Metropolitan Police Department)
Amazon Prime delays are now as long as a month - VIDEO
As of Sunday, many nonessential items ordered with Prime delivery are showing an April 21 delivery date. (Las Vegas Review-Journal)
Fed announces unprecedented actions to stabilize markets - VIDEO
The Federal Reserve announced several new measures on Monday. Among the announced programs is a further commitment of $300 billion "supporting the flow of credit" for Main Street businesses. (Las Vegas Review-Journal)
Lee’s Discount Liquor stores close on Sunday - VIDEO
Lee’s Discount Liquor stores across the Las Vegas Valley closed at 3 p.m. Sunday, March 22, the company announced on Twitter. (Las Vegas Review-Journal)
Local Businesses Message To Customers After Closing - Video
Local movie theaters and stores leave signs on their doors for customers as businesses close after being ordered to shut down.
Valley businesses react to mandatory order to shut down - VIDEO
All non-essential businesses in the Las Vegas Valley have to shut down. We spoke with store owners who would remain open for the benefit of the community and others who were still confused as to why they had to close. (James Schaeffer / Las Vegas Review-Journal)
Nevada casino closures impact 206K workers, AGA finds - VIDEO
About 206,000 direct casino employees in Nevada are without work after Gov. Steve Sisolak’s Tuesday mandate, according to the American Gaming Association. (James Schaeffer / Las Vegas Review-Journal)
More Las Vegas Valley grocery stores offer early hours for seniors - VIDEO
A growing list of Las Vegas Valley retailers are offering special shopping hours for seniors in light of the COVID-19 pandemic. (James Schaeffer / Las Vegas Review-Journal)
Nevada casinos closing for 30 days following state order - VIDEO
Gov. Steve Sisolak’s unprecedented order on nonessential Nevada businesses will shut down 440 licensed casinos. (James Schaeffer / Las Vegas Review-Journal)
Wynn CEO and Dr. Rebecca Katz go over coronavirus - Video
The Wynn CEO Matt Maddox and Dr. Rebecca Katz give a warning about the coronavirus in Las Vegas and around the world.
The Bellagio casino floor cleared as guests get ready to leave hotel - VIDEO
The Bellagio casino floor cleared as guests get ready to leave hotel (James Schaeffer / Las Vegas Review-Journal)
Tourists upset with MGM Resorts' lack of closure notice - VIDEO
Tourists like David and Emma Walker, who are visiting from Scotland, found out about MGM Resorts' property closures through Google, instead of the Luxor where they are currently staying. The Walkers are upset with how MGM has handled the situation by not making their customers aware of the closures first. (Cassie Soto/Las Vegas Review-Journal)
All Las Vegas MGM casinos, hotels to temporarily close - VIDEO
MGM Resorts International announced Sunday it is temporarily suspending operations at all Las Vegas properties “until further notice” effective Tuesday. (James Schaeffer / Las Vegas Review-Journal)
Caesars begins layoffs during coronavirus crisis - VIDEO
Documentation obtained by the Review-Journal shows Caesars Entertainment Corp. has begun laying off employees amid reduced travel demand from the coronavirus pandemic. (James Schaeffer / Las Vegas Review-Journal)
Traveling through Las Vegas airport during coronavirus pandemic - VIDEO
Passengers travel through the McCarran International Airport in Las Vegas on Thursday, March 12, 2020, amid concerns of the coronavirus pandemic. (Las Vegas Review-Journal)
MGM Resorts to temporarily close buffets amid coronavirus fears - VIDEO
MGM Resorts International will temporarily close its Las Vegas buffets, effective Sunday amid growing coronavirus fears. (Al Mancini and James Schaeffer / Las Vegas Review-Journal)
Las Vegas home prices break bubble-era record - VIDEO
After more than 13 years, Las Vegas house prices have finally eclipsed their bubble-era peak. (James Schaeffer / Las Vegas Review-Journal)
Tourists in Las Vegas share their concerns over coronavirus - VIDEO
Tourists share their concerns over coronavirus while they are visiting Las Vegas. (Bizuayehu Tesfaye/Las Vegas Review-Journal) @bizutesfaye
Las Vegas casino shares tumbling as coronavirus fears grip markets - VIDEO
Las Vegas-based casino operators’ shares tumbled Thursday morning along with other stocks as financial markets reacted to the rapid spread of the new coronavirus. (James Schaeffer and Bailey Schulz / Las Vegas Review-Journal)
Heavy traffic expected for CONEXPO next week in Las Vegas - VIDEO
Heavy traffic is expected in the area surrounding the Las Vegas Convention Center next week as 130,000 attendees flock to a pair of trade shows. (James Schaeffer / Las Vegas Review-Journal)
Many Las Vegas conventions proceeding despite coronavirus fears - VIDEO
While the upcoming Adobe, ASEAN, Atmosphere, and NXT conferences have been canceled due to the spread of coronavirus, many other upcoming conferences in Las Vegas are still scheduled as planned. (James Schaeffer / Las Vegas Review-Journal)
Watch Las Vegas construction boom change the city skyline
An aerial look at the changing landscape in Las Vegas construction over the past year.
Raiders sell and lease back headquarters - VIDEO
RJ reporter Eli Segall talks about the numbers behind the sale and lease back of the Raiders headquarters in Henderson and why businesses make these types of land grabs. (Renee Summerour/Las Vegas Review-Journal)
THE LATEST