Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

ClosedHighNo fix needed

Day · Sep 14, 2023

MGM Resorts and Caesars hit by Scattered Spider

MGM Resorts International; Caesars Entertainment

Follow this incident

Updates on Sep 14, 2023

  1. Caesars 8-K filing; reports say it paid about half of a $30M demand

    Source

Summary

Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.

Read the full incident →

Advisories2