Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

ClosedHighNo fix needed

Day · Sep 12, 2023

MGM Resorts and Caesars hit by Scattered Spider

MGM Resorts International; Caesars Entertainment

Follow this incident

Updates on Sep 12, 2023

  1. MGM statement on the cybersecurity issue

    Source

Summary

Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.

Read the full incident →

Advisories2