Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

ClosedHighNo fix needed

Day · Oct 5, 2023

MGM Resorts and Caesars hit by Scattered Spider

MGM Resorts International; Caesars Entertainment

Follow this incident

Updates on Oct 5, 2023

  1. MGM 8-K: about $100M impact on Adjusted Property EBITDAR, data of customers from before March 2019 stolen

    Source

Summary

Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.

Read the full incident →

Advisories2