MGM Data Breach Lawsuit
At a glance
What is the MGM data breach lawsuit about?
We are investigating a potential lawsuit after MGM allegedly failed to prevent hackers from stealing 6TBs of private information from its databases.Who and what were affected by the MGM data breach?
Hackers stole SSNs, passport numbers, and a treasure trove of other personal info from many customers who stayed or gamed with MGM before March 2019.What is the goal of these lawsuits?
Gibbs Law Group would seek compensation for potentially millions of customers who may have been affected by yet another data breach targeting MGM.
Receive an MGM data breach notification?
Learn your legal rights.
MGM Data Breach Notification and Summary
Two criminal hacking and ransomware groups have taken credit for a ten-day cyberattack starting on September 7 that affected thousands of guests at MGM Resorts hotels. On October 5, MGM emailed a notice to some customers notifying them of the data breach. MGM has acknowledged that hackers stole information belonging to some customers who stayed or gamed with the company prior to March 2019, including “name, contact information, gender, date of birth, and driver’s license number,” and, for some customers, Social Security number and passport number.
Was I affected by the MGM Data Breach?
MGM has said that customers who “transacted” with the company before March 2019 may have been affected by this most recent data breach. While MGM has provided minimal details, Gibbs Law Group will continue to investigate exactly who was affected and what data was taken.
Some notable properties and services connected to MGM Resorts include:
- The MGM Grand
- The Bellagio
- Park MGM Las Vegas
- Mandalay Bay
- Luxor
- The Cosmopolitan of Las Vegas
- BetMGM
MGM and Other Hotels Have Been Subject to Past Attacks
Hackers previously stole and published the personal information of over 10 million MGM Resorts customers in 2020. Gibbs Law Group partner David Berger was chosen as co-lead counsel by the court in that case to lead the fight on behalf of affected customers. Our previous lawsuit alleges that the 2020 data breach was due to MGM’s inadequate cybersecurity.
Reports suggest that the same hacking group behind the current MGM cyberattack was behind a similar attack on Caesars Entertainment in September 2023. Caesars has acknowledged that the attackers stole “a copy of [its] loyalty program database” containing social security numbers and other personal information for customers enrolled in its 65-million-member Rewards program.
Class Action Lawsuits for the MGM Data Breach
Several class action lawsuits have been filed alleging that MGM Resorts did not adequately protect the sensitive personal information of potentially millions of MGM customers whose data was stolen. Gibbs Law Group would seek compensation for data breach victims who may have been affected by the recent cyberattack and data breach targeting MGM’s internal databases. Just as important, Gibbs Law Group would force MGM to fix its apparently ineffective data security systems to protect customer information from any more breaches.
Stay or play at MGM before March 2019?
Our Data Breach Attorneys
David Berger
David represents consumers in data breach, privacy, and financial services litigation. He has prosecuted some of the largest privacy cases nationwide.
View full profileEric Gibbs
A founding partner at the firm, Eric has negotiated groundbreaking settlements that favorably shaped laws and resulted in business practice reforms.
View full profileJeff Kosbie
Jeff represents workers and consumers in complex class actions involving data breaches and privacy, employment law, and other corporate misconduct.
View full profileAbout Us
Gibbs Law Group is a California-based law firm committed to protecting the rights of clients nationwide who have been harmed by corporate misconduct. We represent individuals, whistleblowers, employees, and small businesses across the U.S. against the world’s largest corporations. Our award-winning lawyers have achieved landmark recoveries and over a billion dollars for our clients in high-stakes class action and individual cases involving consumer protection, data breach, digital privacy, and federal and California employment lawsuits. Our attorneys have received numerous honors for their work, including “Top Plaintiff Lawyers in California,” “Top Class Action Attorneys Under 40,” “Consumer Protection MVP,” “Best Lawyers in America,” and “Top Cybersecurity/ Privacy Attorneys Under 40.”
