October 5, 2023
We recently learned of a cybersecurity issue affecting our company.
What Happened?
MGM Resorts International recently disclosed that the company identified a cybersecurity issue affecting certain of our systems and that our investigation into the issue was ongoing. On or around September 29, 2023, we determined that an unauthorized third party obtained personal information of some of our customers on September 11, 2023.
What Information Was Involved?
The affected information included name, contact information (such as phone number, email address, and postal address), gender, date of birth, and driver’s license number. For a limited number of customers, Social Security number and/or passport number was also affected. The types of impacted information varied by individual.
We do not believe customer passwords, bank account numbers, or payment card information was affected by this issue.
What We Are Doing
Promptly after learning of this issue, we took steps to protect our systems and data, including shutting down certain systems. We also quickly launched an investigation with the assistance of leading cybersecurity experts and are coordinating with law enforcement. We take the security of our systems and data very seriously and have put in place additional safeguards to further protect our systems.
MGM Resorts is notifying relevant customers by email as required by law and has arranged to provide those customers with credit monitoring and identity protection services at no cost to them. Individuals who receive an email from MGM Resorts about this issue should refer to that email for additional information and instructions for enrolling in these services.
What You Can Do
We recommend that you remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring your free credit reports. We also recommend that you remain alert for unsolicited communications involving your personal information.
If you are in the U.S. and would like to check your credit report, you are entitled under U.S. law to one free credit report annually from each of the three nationwide consumer reporting agencies. U.S. residents can order a free credit report by visiting www.annualcreditreport.com or calling toll-free at 1-877-322-8228. The U.S. Reference Guide below provides recommendations by the U.S. Federal Trade Commission on the protection of personal information.
We regret any inconvenience this issue may have caused. If you have any questions regarding this matter, please refer to the Frequently Asked Questions below or contact 1-800-621-9437 toll-free Monday through Friday from 8 am – 10 pm Central, or Saturday and Sunday from 10 am – 7 pm Central (excluding major U.S. holidays). Please reference engagement number B105892 when calling.
To help answer questions you may have related to this matter, please refer to the FAQs below.
1. What happened?
MGM Resorts International recently disclosed that the company identified a cybersecurity issue affecting certain of our systems and that our investigation into the issue was ongoing. On or around September 29, 2023, we determined that an unauthorized third party obtained personal information of some of our customers on September 11, 2023.
2. What did MGM Resorts do when it discovered the issue?
Promptly after learning of this issue, we took steps to protect our systems and data, including shutting down certain systems. We also quickly launched an investigation with the assistance of leading cybersecurity experts and are coordinating with law enforcement. We take the security of our systems and data very seriously and have put in place additional safeguards to further protect our systems.
MGM Resorts is notifying relevant customers by email as required by applicable law and has arranged to provide those customers with credit monitoring and identity protection services at no cost to them. Individuals who receive an email from MGM Resorts about this issue should refer to that email for additional information and instructions for enrolling in these services.
3. What information has been compromised?
The affected information included name, contact information (such as phone number, email address, and postal address), gender, date of birth, and driver’s license number. For a limited number of customers, Social Security number and/or passport number was also affected. The types of impacted information varied by individual.
We do not believe customer passwords, bank account numbers, or payment card information was affected by this issue.
For individuals who became MGM Resorts customers after February 2019, we do not believe sensitive personal information (such as driver’s license number, passport number or Social Security number) was affected by this issue.
This issue did not affect personal information that customers provided in connection with their visit to The Cosmopolitan of Las Vegas.
4. What should I do to help protect my information?
We recommend that you:
5. Where can I get more information?
If you have additional questions regarding this matter, please contact us at 800-621-9437 toll-free Monday through Friday from 8 am – 10 pm Central, or Saturday and Sunday from 10 am – 7 pm Central (excluding major U.S. holidays). Please reference engagement number B105892 when calling.
6. What if I am in Canada?
On or about October 26, 2023, MGM determined that some Canadian customers were impacted. MGM issued notice to affected Canadian customers in accordance with applicable law. If you have received an email or letter from MGM, this includes the notice information that relates to you. Affected Canadian customers should review the information in the notice that they receive. For outstanding questions you may contact 1-855-984-2828. The call centre is available Monday to Friday, from 8:00 am ET to 8:00 pm ET.
