Cybercrime

MGM Resorts Confirms ‘Cybersecurity Issue’, Shuts Down Systems

MGM Resorts confirms “cybersecurity incident” led to the shutdown of web sites and IT systems of hotels throughout the United States.

MGM Resorts confirms "cybersecurity incident" led to the shutdown of web sites and IT systems of hotels throughout the United States.

Hospitality and entertainment giant MGM Resorts on Monday said a “cybersecurity issue” forced the shutdown of certain computer systems, including the websites for some of the biggest Las Vegas and New York properties.

A brief note posted to X (the website formerly known as Twitter) said external cybersecurity experts and law enforcement are involved in an investigation that has all the hallmarks of a ransomware extortion attack.

Here’s the full MGM Resorts statement:

“MGM Resorts recently identified a cybersecurity issue affecting some of the Company’s systems. Promptly after detecting the issue, we quickly began an investigation with assistance from leading external cybersecurity experts. We also notified law enforcement and took prompt action to protect our systems and data, including shutting down certain systems.

Our investigation is ongoing, and we are working diligently to determine the nature and scope of the matter.”

MGM Resorts properties include the Mandalay Bay (the site of the Black Hat security conference), Bellagio, MGM Grand, Aria, Luxor and the Cosmopolitan.

Advertisement. Scroll to continue reading.

The incident began sometime on Sunday and affected hotel reservation systems throughout the United States and other IT systems that run the casino floors.

At 1:00PM PST Monday, services on the company’s homepage remained unavailable.

Related: BetMGM Confirms Breach Affecting 1.5 Million Customers

Related: Hospitality Chain Hit by Ransomware Attack

Related: Payments Giant NCR Hit by Ransomware

Related Content

Threat Intelligence

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.

Data Breaches

The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.

Data Breaches

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.

Data Breaches

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.

Data Breaches

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

Data Breaches

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.

Data Breaches

Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.

Data Breaches

Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version