“MGM’s filing with regulators reveals that the company expects the attack to reduce its third-quarter profit by approximately $100 million.”
Scattered Spider took down MGM’s slot machines, ATMs and booking systems in September. The company now admits the hackers took names, birth dates and driver license numbers, plus some Social Security and passport numbers. The stolen records belong to customers from before March 2019, which means MGM kept data on people it had not served in four years. MGM says its cyber insurance will cover the hit. The customers whose IDs are on a leak site get no policy.