A Hacker Stole The Personal Data Of 30 Million Guests Of A Major Hotel Chain

[✨ Megiddo]

8.7 GB of data available for download on Telegram

According to VPNMentor researchers, the data leak includes personal information of MGM customers. MGM Resorts International is a hotel and gambling management company. The company owns 29 facilities, including the well-known casinos Bellagio, MGM Grand, Luxor in Las Vegas, as well as MGM Macau and MGM Cotai in the administrative region of China - Macau.

On July 14, 2020, an attacker alias NightLion stole several databases from the DataViper leak monitoring site. One of the databases was owned by MGM Resorts and contained the personal details of 142 million customers. The stolen database was posted on Telegram for free download. On May 22, 2022, four archives with 8.7 GB of data were discovered. This leak may have affected approximately 30 million people.

According to VPNMentor researchers, the information includes the following data:

• Full names

• Dates of birth

• Phone numbers

• Email addresses

According to the hacker who published the data on Telegram, the leak contains 142,479,938 entries. This is more than 24 million email addresses and more than 30 million contact numbers.

Now any attacker can use this data to scam and launch phishing email campaigns. Since the stolen data is already 2 years old, victims may not expect to be hacked, making them more vulnerable to attacks.
__________________