MGM Resorts
US casino and hotel operator whose September 2023 cyberattack cost it about $100m.
MGM Resorts International shut down systems after a September 2023 cyberattack that it said cut about $100m from that month's property earnings, an intrusion that reportedly began with one call to its IT HELP desk.
Last refreshed: 12 October 2026
How much did one help-desk call cost MGM Resorts?
Timeline for MGM Resorts
Named as MGM Resorts
Cybersecurity: Threats and Defences: Mentioned in: Astrana Health files 8-K over phone spoofMentioned in: World Leaks posts 630GB stolen from Tata
Cybersecurity: Threats and DefencesBackground
MGM Resorts International runs casino hotels and reports results in two parts: its Las Vegas Strip resorts and its regional operations.
In September 2023 the company shut down systems after a cyberattack, and some of its properties were disrupted. A Form 8-K filed in October 2023 put the hit to September Adjusted Property EBITDAR at about $100m, with one-time costs below $10m, and said MGM expected insurance to cover the losses. The attackers took personal data, including names, contact details and licence numbers, belonging to some customers WHO had transacted with MGM before March 2019. A Scattered Spider representative told TechCrunch the group carried out the attack; the ALPHV ransomware gang also claimed it.
According to reports at the time, the intruders phoned MGM's IT HELP desk, posed as an employee and had credentials reset. Security Teams treat the MGM breach as the reference case for HELP-desk impersonation, the approach callers used against Astrana Health, a US healthcare company, in September 2026.