https://pwn.watch/t/mgm-resorts Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 05 Oct 2023 00:00:00 GMT https://pwn.watch/i/mgm-resorts-caesars-scattered-spider-2023 https://pwn.watch/i/mgm-resorts-caesars-scattered-spider-2023 Thu, 05 Oct 2023 00:00:00 GMT high <p>Scattered Spider, an ALPHV/BlackCat affiliate, used social engineering to breach two Las Vegas casino giants. Caesars lost its loyalty program database and reportedly paid about $15M. MGM shut down systems for days and estimated a $100M hit, with pre-March-2019 customer data stolen.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> no-fix-needed</p> <p><strong>Latest updates:</strong></p><ul><li>2023-10-05: MGM 8-K: about $100M impact on Adjusted Property EBITDAR, data of customers from before March 2019 stolen (<a href="https://www.sec.gov/Archives/edgar/data/789570/000119312523251667/d461062d8k.htm">source</a>)</li><li>2023-09-14: Caesars 8-K filing; reports say it paid about half of a $30M demand (<a href="https://www.cnbc.com/2023/09/14/caesars-paid-millions-in-ransom-to-cybercrime-group-prior-to-mgm-hack.html">source</a>)</li><li>2023-09-12: MGM statement on the cybersecurity issue (<a href="https://investors.mgmresorts.com/2023-09-12-MGM-RESORTS-INTERNATIONAL-STATEMENT-ON-CYBERSECURITY-ISSUE">source</a>)</li></ul>