"},"content":{"rendered":"<\/p>\n
<\/p>\n
Cyber attacks are a scourge that does not spare large corporations. MGM Resorts International<\/strong> was targeted on September 7, 2023<\/strong> by a group of hackers called Scattered Spider<\/strong>. MGM Resorts, which operates over 30 hotels<\/strong> and gaming venues worldwide, has annual sales of $14 billion<\/strong>.<\/p>\n <\/p>\n Scattered Spider managed to paralyze several MGM systems, causing considerable disruption to its operations. Slot machines and other systems remained out of service in the company’s establishments, notably in Las Vegas.<\/p>\n <\/p>\n The FBI<\/strong> said on Wednesday September 13 that it was investigating the incident, but gave no further details.<\/p>\n <\/p>\n Another casino operator, Caesars Entertainment<\/strong>, was also targeted. However, it paid a ransom to avoid the disclosure of its data.<\/p>\n <\/p>\n <\/p>\n The Scattered Spider group, also known as UNC3944<\/strong>, is renowned for its use of social engineering, tricking users into divulging their credentials and passwords to bypass multi-factor authentication.<\/p>\n <\/p>\n It is “one of the most prevalent and aggressive threat actors impacting organizations in the U.S. today,”<\/em> said Charles Carmakal<\/strong>, CTO at Mandiant Intelligence in a LinkedIn post, following reports of the MGM breach.<\/p>\n <\/p>\n “While the group’s members are less experienced and younger than many multi-faceted extortion\/ransomware groups and nation-state espionage actors, they pose a serious threat to large organizations in the United States.”<\/em><\/p>\n <\/p>\n Another hacker group called AlphV<\/strong> claimed to be involved in the attack. According to Reuters sources, AlphV worked with Scattered Spider to break into MGM’s systems and steal data for extortion.<\/p>\n <\/p>\n <\/p>\n On Thursday September 14, Scattered Spider announced that it had extracted six terabytes<\/strong> of data from the systems of powerful casino operators MGM Resorts International and Caesars Entertainment. Both companies are themselves investigating the intrusions.<\/p>\n <\/p>\n The private data of customers who used MGM services before March 2019<\/strong>, including contact details, gender, date of birth and driver’s license numbers<\/strong>, was breached, the company said. MGM said the hackers had not obtained any bank account numbers or payment card information<\/strong> from its customers, and that no data from its luxury hotel, the Cosmopolitan of Las Vegas, had been breached.<\/p>\n <\/p>\n In a communication to Reuters via the Telegram<\/strong> messaging platform, a Scattered Spider representative said they had no intention of making the data public and declined to reveal whether they had demanded a ransom from the companies. “If MGM wishes to disclose this information, they will. We don’t,”<\/em> said a spokesman for Scattered Spider. It was a cybersecurity expert running an online repository of malware samples called “vx-underground”, who chose to remain anonymous, who put Reuters in touch with this Scattered Spider contact.<\/p>\n <\/p>\n <\/p>\nHacker groups<\/h2>\n
Six terabytes of data breached<\/h2>\n
Financial repercussions<\/h2>\n
\n
\n\t\t