MGM Resorts International has admitted that a cyber attack on its systems has leaked the personal data of 10.6 million of its guests, including celebrities, FBI agents and CEOs, to hacker forums online.
The breach was first reported this week by ZDNet, which verified the authenticity of the data together with a researcher from Under the Breach.
The posted data contains the personal details of 10,683,188 former hotel guests. This not only included members of the public, but high-profile celebrities such as Justin Bieber and Twitter CEO Jack Dorsey.
The released information included names, addresses, phone numbers and email addresses, although MGM said it is confident that no financial or card information was shared.
“Last summer, we discovered unauthorised access to a cloud server that contained a limited amount of information for certain previous guests of MGM Resorts,” MGM said in a statement.
“At MGM Resorts, we take our responsibility to protect guest data very seriously, and we have strengthened and enhanced the security of our network to prevent this from happening again.”
Online message boards showed customers in late August 2018 were contacted by MGM Resorts to inform them their data had been stolen. The company has now confirmed that they contacted customers according to US law.
MGM Resort International runs hotels and resorts in several countries, 13 of which are situated in Las Vegas. It also operates in China and Japan with around 34 resorts in total.
- Non-Traditional Recruitment Could Bridge Scotland’s Digital Skills Gap
- Computer Scientist Behind Cut-Copy-Paste Dies Aged 74
- NHS App Shares Data with Clinicians to Improve Cancer Patient Care
The hackers are believed to be Gnosticplayers, who are thought to be responsible for a series of massive data leaks. In 2019, it was said the group stole more than 932 million user records from 44 companies.
This latest attack is small compared to the massive security breach of the Marriot hotel chain between 2014 and 2018, when information of 500 million hotel guests was exposed.