MGM Resorts forced to pay out a $45 million settlement in court due to two extensive data breaches.
MGM Resorts has found itself in hot water over a pair of data breaches, one in July 2019 and another in September 2023. These incidents exposed the sensitive details of countless customers, potentially including their full names, emails, phone numbers, birthdates, addresses, and in some cases, even passport numbers, driver’s licenses, military IDs, and Social Security numbers [1][3].
The casino corporation recently agreed to a $45 million settlement as part of a class-action lawsuit [1][5]. This agreement offers several benefits to the affected customers. Depending on the extent of stolen information, eligible claimants can receive up to $75 in cash payments, a year of identity theft protection, financial account monitoring, and at least $1,000,000 in fraud/identity theft insurance coverage [2]. In addition, individuals may be eligible for up to $15,000 in reimbursement for documented financial losses linked to the data breaches [2].
To be part of this settlement, claims must be submitted online or mailed by June 3, 2025. Any late claims may not be considered [2].
These breaches were the result of inadequate data security systems, with the lawsuit alleging that the casino company neglected to protect sensitive customer data [4]. The lawsuit was instigated by customers like Tonya Owens, highlighting the severe implications of these events [1][5]. The settlement has been provisionally approved by the Nevada District Court, and class members have received notifications since February 2025 [5].
In total, thousands of customers who had stayed at MGM hotels or casinos during the respective cyberattack periods had their personal information compromised [1][3]. This stolen data has the potential to facilitate identity theft and fraud due to its highly sensitive nature [1][3].
To minimize further risks and ensure timely compensation, victims are encouraged to submit claims promptly [2][3]. The saga surrounding MGM Resorts' data breaches serves as a stark reminder of the importance of robust data security measures in today's interconnected world.
- The data breaches at MGM Resorts, happened in July 2019 and September 2023, significantly impacted the finance and casino-and-gambling industry, as the sensitive data of countless customers was exposed.
- In an effort to rectify the situation, MGM Resorts agreed to a $45 million settlement as part of a class-action lawsuit, offering benefits such as cash payments, identity theft protection, financial account monitoring, and fraud/identity theft insurance coverage to the affected customers.
- The settlement also includes the possibility of up to $15,000 in reimbursement for documented financial losses linked to the data breaches, underlining the potential impact of these incidents on the business and banking-and-insurance sectors.
- The cybersecurity lapses at MGM Resorts, leading to these breaches, were attributed to inadequate data security systems, demonstrating the critical role of technology and data-and-cloud-computing in safeguarding customer information.
- While Tonya Owens instigated the lawsuit, thousands of customers who had stayed at MGM hotels or casinos during the respective cyberattack periods were affected, emphasizing the widespread impact of these incidents in the casino-culture of cities like Las Vegas.
- To minimize further risks and ensure timely compensation, victims are urged to submit their claims promptly, using the lessons from the MGM Resorts data breaches to emphasize the importance of robust data security measures in various industries, including fintech.
