All breaches
MGM Resorts (2022 Update) data breach24.8M accounts compromised on 2019-07-25
Verified
MGM Resorts (2022 Update) (mgmresorts.com) was the source of a data breach dated 2019-07-25, exposing 24,842,001 accounts. The details below are mirrored from Have I Been Pwned and reflect the source's account of the incident at the time of publication.
Incident Report
| Target Organization | MGM Resorts (2022 Update) |
|---|---|
| Source Name | MGM2022Update |
| Domain | mgmresorts.com |
| Breach Date | 2019-07-25 |
| Added to HIBP | 2022-05-29 |
| Accounts Compromised | 24,842,001(24.8M) |
| Data Exposed | Dates of birthEmail addressesNamesPhone numbersPhysical addresses |
| Status | Verified by HIBP |
Description
In July 2019, MGM Resorts discovered a data breach of one of their cloud services. The breach included 10.6M guest records with 3.1M unique email addresses stemming back to 2017. In May 2022, a superset of the data totalling almost 25M unique email addresses across 142M rows was extensively shared on Telegram. On analysis, it's highly likely the data stems from the same incident with 142M records having been discovered for sale on a dark web marketplace in mid-2020. The exposed data included email and physical addresses, names, phone numbers and dates of birth.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.