MGM’s guest data is online. Expect the calls
Details of 10.6 million MGM hotel guests, from a 2019 breach, were posted on a hacking forum. Old data, new scams.
Last week personal details of more than 10.6 million people who stayed at MGM Resorts hotels were posted on a hacking forum: names, addresses, phone numbers, emails and dates of birth. MGM says it’s from a 2019 breach of a cloud server, and that no card data or passwords were included.
That still makes a perfect list for targeted scams. A caller who knows your name, phone and that you stayed at a hotel in Las Vegas sounds very believable.
If you might be affected:
- Be suspicious of calls and emails about refunds, bookings or loyalty points. Call back on the number on the official website.
- Never give card details or codes to someone who called you.
- Watch for SIM swap attempts if your phone number protects important accounts.
For businesses: data on a cloud server is still your data. Know where copies live and who can reach them.