MGM Data Breach Affects 10.6M People

By: Joshua B. Swigart

It was recently reported that MGM Resorts International suffered a major data breach in 2019 that affected as many as 10.6 million people. The worldwide casino and hotel operator said it “discovered unauthorized access to a cloud server that contained a limited amount of information for certain previous guests of MGM Resorts,” MGM Resorts said in a statement. MGM would like people to believe the exposed personal data is the same that can be found in a phone book. That, however, does not mitigate the serious ramifications of such a significant data breach.

Under the Breach, a soon-to-be-launched data breach monitoring service, noted that the MGM data breach included email addresses, phone numbers and physical addresses of guests, including celebrities, chief executives of technology companies, reporters and government officials. Additionally, approximately 1,300 individuals had more sensitive data exposed, including driver’s licenses, passports and military identification cards. This breached data was then published on a hacking forum website.

Whether items such as an address and phone number can be found in a phone book or not, a company has a duty to protect your personal information. Any data breach is significant and consumers should be protected against its ramifications. The fact that the “phone book” information was published online means that anyone can potentially see where those 10.6 million people live.

The fact is MGM failed to protect over 10.6 million customers’ personal information. And they subsequently tried to conceal the full extent of the breach from the public. 

It is becoming a regular occurrence that consumers are notified by companies (large and small) that their data may have been compromised. Unfortunately, in today’s electronic data environment, it is likely not a question of “if,” but “when” your personal identifying information will be compromised. If you think you are a victim of the MGM data breach and your data was exposed, please contact our office so we may review your case, free of charge.

Swigart Law Group helps people who have been injured by banks, employers, drug and medical companies, or large corporations, and creates a meaningful and profound impact on the lives of people in the community. Our attorneys are experienced in the areas of consumer protection, privacy and data breaches. Unlike large law corporations, we hand-pick every case we take and we give each of our clients undivided personal attention.