Data Breach Alert - Data of 10.6 Million MGM Resorts Guests Has Been Discovered

[icecream-guy]

Data Breach Alert   

Data of 10.6 Million MGM Resorts Guests Has Been Discovered on a Hacker Forum   
   
   
What is Happening?
Data security researchers discovered an online database containing the personal information of 10.6 million MGM Resorts guests, including celebrities, reporters, government officials, and tech company executives, on a hacker forum. The database is reportedly from a security incident that occurred last summer in which data was obtained through unauthorized access to a cloud server.

Breached data include:
Full names
Dates of birth
Home addresses
Phone numbers
Email addresses

MGM reportedly contacted affected guests when the incident was discovered last summer, however the data has now appeared on well-known hacking forums. MGM has said that the exposed information was older and believes that the breached data is from guest stays from 2017 and earlier. While no payment information or passwords are part of the exposed data, the personal information could be used in phishing attacks, password resets, and other nefarious activities.

[deanwebb]

Could also be used in full-on identity theft, these guys are totally negligent.

Unauthorized access to a cloud server? This is why I don't cloud.

[Otanx]

Huh. They just went thought a re-org as well. They laid off a bunch of IT staff in December (along with a bunch of other groups). Guess I really don't want the cyber architect position they have posted.

-Otanx

[deanwebb]

1. Re-org and lay off everyone that knows stuff
2. Outsource it all and look like you had a massive cost savings
3. Explain to the world about the impact of your recent breach