This article is from the source 'guardian' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.

You can find the current article at its original source at https://www.theguardian.com/technology/2020/feb/19/mgm-resorts-hotel-hack-data-breach

The article has changed 2 times. There is an RSS feed of changes available.

Version 0 Version 1
Personal details of 10.6m MGM hotel guests revealed by hackers, report says Personal details of 10.6m MGM hotel guests revealed by hackers, report says
(about 13 hours later)
Justin Bieber and Jack Dorsey among those targeted by hack as MGM confident no financial or password data breachedJustin Bieber and Jack Dorsey among those targeted by hack as MGM confident no financial or password data breached
Personal details of more than 10.6 million former guests of MGM Resorts hotels, including Justin Bieber and Twitter chief executive Jack Dorsey, were posted on an online hacking forum this week, according to a new report. Personal details of more than 10.6 million former guests of MGM Resorts hotels, including Justin Bieber and Twitter’s chief executive, Jack Dorsey, were posted on an online hacking forum this week, according to a new report.
The details published include full names, home addresses, phone numbers and emails, the tech news outlet ZDNet reported on Wednesday. Those targeted include high-profile figures such as Dorsey and Bieber, as well as regular tourists, reporters, and FBI agents. The details published include full names, home addresses, phone numbers and emails, the tech news outlet ZDNet reported on Wednesday. Those targeted include high-profile figures such as Dorsey and Bieber, as well as regular tourists, reporters and FBI agents.
ZDNet said it verified the authenticity of the data with a security researcher from Under the Breach, a soon-to-be-launched data breach monitoring service.ZDNet said it verified the authenticity of the data with a security researcher from Under the Breach, a soon-to-be-launched data breach monitoring service.
MGM owns and operates luxury resorts in Las Vegas, as well as other locations in the United States, Japan and China. Its Las Vegas resorts frequently draw thousands of guests for casino tournaments, boxing matches and UFC fights.MGM owns and operates luxury resorts in Las Vegas, as well as other locations in the United States, Japan and China. Its Las Vegas resorts frequently draw thousands of guests for casino tournaments, boxing matches and UFC fights.
An MGM spokesperson told ZDNet that the information comes from a security incident that happened last year after MGM “discovered unauthorized access to a cloud server that contained a limited amount of information for certain previous guests of MGM Resorts”.An MGM spokesperson told ZDNet that the information comes from a security incident that happened last year after MGM “discovered unauthorized access to a cloud server that contained a limited amount of information for certain previous guests of MGM Resorts”.
The data reportedly contains no information from guests who stayed at the resorts after 2017.The data reportedly contains no information from guests who stayed at the resorts after 2017.
While sizable, the security incident is not the largest to hit the hotel industry in recent years. In 2017, a data breach at the Marriott hotels saw Chinese state-sponsored hackers steal the information of up to 500 million guests.While sizable, the security incident is not the largest to hit the hotel industry in recent years. In 2017, a data breach at the Marriott hotels saw Chinese state-sponsored hackers steal the information of up to 500 million guests.
Catalin Cimpanu, the ZDNet reporter behind the story, wrote on Twitter that the information published was leaked in July 2019, a month before customers were notified of the breach.Catalin Cimpanu, the ZDNet reporter behind the story, wrote on Twitter that the information published was leaked in July 2019, a month before customers were notified of the breach.
MGM told ZDNet that it is confident that no financial or password data was involved in the security incident.MGM told ZDNet that it is confident that no financial or password data was involved in the security incident.
MGM did not immediately respond to the Guardian’s request for comment.MGM did not immediately respond to the Guardian’s request for comment.