Summary

  • Las Vegas casino operator MGM Resorts International has agreed to a $45m settlement over data breaches in 2019 and 2023 that saw the personal data of 37 million customers exposed.
  • The settlement covers 22 class action lawsuits filed over the incidents.
  • Lawyers for the victims said customer data exposed included names, addresses, phone numbers, dates of birth, and passport numbers, with additional information exposed in the 2023 attack, including driver’s license numbers and social security numbers.
  • The 1,000 payment for those victims whose losses they can document.
  • In addition to the settlement, MGM is also under investigation by the Federal Trade Commission over its handling of the 2023 attack.

Original Article