MGM Resorts agrees to settle data breaches for $45M

MGM Resorts International has agreed to financially compensate victims of a data breach in 2019 and a ransomware attack in 2023 for a total of $45 million.
MGM Resorts International is a hospitality and entertainment provider that operates in Las Vegas, Nevada. In order to conduct its business, the company collects, stores and processes personal information of its customers, including names, contact information, gender, dates of birth, driver’s license numbers, copies of passport numbers, and social security numbers.
In July 2019 and September 2023, MGM’s computer systems were hacked by cybercriminals, resulting in the unauthorized access of tens of millions of customers’ personal information.
As a precautionary measure, MGM temporarily took slot machines, ATMs, and a number of computer systems offline.
“Promptly after detecting the issue, we quickly began an investigation with assistance from leading external cybersecurity experts. We also notified law enforcement and took prompt action to protect our systems and data, including shutting down certain systems. Our investigation is ongoing, and we are working diligently to determine the nature and scope of the matter,” an MGM Resorts International spokesperson said in a statement at the time.
Ever since victims have tried to settle the matter with MGM, according to court filings with the United States District Court of Nevada, the company has agreed to a settlement of $45 million.
Depending on what type of information was stolen, victims are entitled to a tier 1, tier 2, or tier 3 cash payment. Tier 1 settlement class members will receive $75 dollars, tier 2 members $50 dollars, and tier 3 members $20 dollars.
In addition, all eligible settlement class members are also entitled to a cash payment of $15,000, but only if they can prove they suffered further losses due to identity theft related to the data breaches. Class members who object to the settlement have the option to opt out.
The final approval hearing will take place on June 18. If the court approves the settlement offer, the money will be transferred to the victims within 75 days of the settlement’s effective date.
Your email address will not be published. Required fields are marked