In the aftermath of a cyberattack on MGM Resorts, some of the largest hotels on the Las Vegas strip have been severely affected for five consecutive days. This attack has not only inconvenienced guests but has also put a significant strain on the day-to-day operations of hotel employees. The situation remains unresolved, as reservation systems continue to experience technical difficulties, causing long lines at check-in and limiting guests’ access to digital keys and meal charges. MGM Resorts has yet to provide a comment regarding the incident, but it has assured guests that all shows will proceed as scheduled while the investigation into the extent of the data breach continues. This incident follows a similar attack on Caesars Entertainment, where customer data was acquired. A group of hackers calling themselves AlphaV has claimed responsibility for the MGM attack and threatens to carry out further attacks if their demands are not met. The severity of the breach highlights the vulnerability of even the most prominent and well-known companies to cyber threats.
MGM Resorts hit by cyberattack
Read more about the Latest Money News
Background
MGM Resorts, one of the leading names in the casino and hospitality industry, recently fell victim to a cyberattack that has had far-reaching consequences. This incident serves as a reminder of the increasing threat of cyberattacks on hotels and casinos, and the potentially devastating impact they can have on the industry as a whole.
Impact on Las Vegas strip hotels
The cyberattack on MGM Resorts has had a significant impact on some of the biggest hotels on the iconic Las Vegas strip. The attack has left these hotels hobbled for five days and counting, causing inconvenience and frustration for both travelers and hotel employees alike. Reservations systems have remained down for most of the week, resulting in long lines and slow check-ins at casinos such as the Excalibur and Aria.
Read more about the Latest Money News
Issues faced by guests
The cyberattack has presented a range of issues for guests staying at MGM Resorts’ hotels. One major issue is the inability to use digital keys to access their rooms and charge meals to their accounts. Additionally, many slot machines have been rendered nonfunctional, further hampering the guest experience. Furthermore, the lack of mobile check-in options has added to the inconveniences faced by guests during their stay.
Response from MGM Resorts
Despite the severity of the cyberattack and its impact on guests, MGM Resorts has remained largely silent. Fast Company reached out to the company for comment but received no response. However, in a social media post, MGM Resorts acknowledged the cybersecurity issue and assured guests that the company is diligently working to resolve it. The post also addressed individual guest needs and confirmed that all shows are proceeding as scheduled. The investigation into the breach and the extent of the stolen guest information is currently ongoing.
Previous cyberattack on Caesars Entertainment
This cyberattack on MGM Resorts bears similarities to a previous attack on Caesars Entertainment, another prominent player in the casino industry. Caesars Entertainment acknowledged the attack in a filing with the Securities and Exchange Commission (SEC). In contrast to MGM Resorts’ response, Caesars reportedly paid the ransom demanded by the hackers, avoiding any major outages. However, customer data was still compromised, including sensitive information such as driver’s license numbers and social security numbers.
Hackers claim responsibility
A hacker group known as AlphaV has claimed responsibility for the cyberattack on MGM Resorts. The group alleges that it has access to some of MGM’s infrastructure and has threatened additional attacks if an agreement is not reached. Despite attempts to reach out to MGM Resorts, the hackers claim to have received no response from the company.
Methods used by hackers
The cyberattack on MGM Resorts employed a combination of social engineering tactics and network infiltration. The hackers utilized social engineering to gain the trust of an employee, ultimately allowing them to penetrate the system. Once inside, the hackers targeted MGM’s network and ESXi hypervisors, successfully launching ransomware attacks against over 100 hypervisors.
Veracity of hackers’ claims
A post on a malware archive called vx-underground supports the hackers’ claims regarding the compromise of MGM Resorts. According to the post, the hackers were able to defeat MGM with a simple 10-minute conversation after finding an employee on LinkedIn and calling the Help Desk. However, the veracity of this claim has not been independently verified.
MGM’s worldwide casino network
MGM Resorts operates a worldwide network of prestigious casinos, including renowned establishments such as the MGM Grand, Bellagio, Cosmopolitan, Aria, and more. This cyberattack highlights the vulnerability of not just a single casino, but an entire network of high-profile establishments.
Conclusion
The cyberattack on MGM Resorts serves as a stark reminder of the increasing threat of cyberattacks on the hotel and casino industry. The impact on the Las Vegas strip hotels and the inconveniences faced by guests highlight the urgent need for robust cybersecurity measures to protect both customers and businesses. The response from MGM Resorts and the previous cyberattack on Caesars Entertainment provide valuable insights into how the industry can better prepare for and respond to such incidents. As the investigation continues and the industry reflects on this attack, it is clear that cybersecurity should remain a top priority for any organization operating in the hospitality sector.
