United States
USA
MGM Resorts ransomware disrupts U.S. casino and hotel operations
Beginning 10/09/2023, MGM RESORTS INTERNATIONAL experienced a cyberattack initiated via social engineering of the help desk attributed to SCATTERED SPIDER with ALPHV involvement. MGM shut down key IT systems, disrupting hotel check‑in, digital room keys, online reservations, email, and slot machines across multiple U.S. properties. Operations substantially recovered in about 10 days, and the company disclosed around $100 million impact. Reporting also indicates data exfiltration occurred.
85
Estimated severity
85 / 100
95
Source reliability
95 / 100
Approximate Date
10/09/2023
Targeted Company
MGM RESORTS INTERNATIONAL
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
10 days
Financial impact (USD M)
$100M
Impact types
Service unavailabilityOperational disruptionOrder processing disruptionDownstream customer disruption
Affected sectors
Hospitality & Travel
Affected departments
Information TechnologyCustomer ServiceFacilities & Physical Operations
Attack Profile
Attack types
RansomwareSocial engineeringUnauthorized accessData exfiltration
Attributed threat actors
SCATTERED SPIDERALPHV
Sources
Incident Sources
techcrunch.comhttps://techcrunch.com/2023/10/06/mgm-resorts-admits-hackers-stole-customers-personal-data-cyberattacksecureworld.iohttps://www.secureworld.io/industry-news/breach-mgm-resorts-hotel-accessnetwrix.comhttps://netwrix.com/en/resources/blog/mgm-cyber-attacksecurityblueprints.iohttps://securityblueprints.io/data-breaches/mgm-grand-cyberattack