MGM Resorts International found itself grappling with a significant cybersecurity incident that began on Sunday and disrupted its operations across the United States. This event is not an isolated occurrence for the company; MGM Resorts also experienced a data breach in 2020 that affected millions of customers.
The latest incident has had a sweeping impact, affecting everything from room reservations to casino operations.
The Incident
The cybersecurity issue affected MGM Resorts’ properties in multiple states, including Las Vegas, Maryland, Massachusetts, Michigan, Mississippi, New Jersey, New York, and Ohio. The immediate impact of the breach was substantial, disrupting reservation systems, room keys, and even casino slot machines. Guests found themselves locked out of their rooms, and some were unable to cash out after playing at the casino’s slot machines. The incident also had operational repercussions; the company’s official website was down, directing potential guests to call for reservations.
MGM Resorts is the biggest employer in Nevada and owns most of the casinos on the Las Vegas Strip, amplifying the scale of the impact. The situation became so dire that a concierge at the iconic Bellagio hotel told local news that the whole system was down “internally and externally,” and it was unclear when it would be restored. All computer operations were being done manually, according to the hotel worker.
The Response
MGM Resorts has been seemingly proactive in its response to the incident. The company engaged external cybersecurity experts for an investigation and notified law enforcement agencies, including the FBI.
The FBI’s involvement adds another layer of gravity to the situation, suggesting that federal agencies are closely monitoring the event. This could potentially lead to broader investigations into cybersecurity vulnerabilities within the hospitality and entertainment industry, and even result in regulatory changes that could affect the entire sector.
The Wrap
As the investigation continues, it is crucial for organizations in the hospitality and entertainment sectors to reassess their cybersecurity protocols. This recent breach also emphasizes the importance of transparent communication in crisis management. While the full extent and long-term implications of the incident remain unclear, one thing is certain: cybersecurity is a critical concern that companies must address to safeguard their operations and protect customer data.
In the wake of this incident, it is likely that we will see a renewed focus on cybersecurity within the hospitality and entertainment industry. Companies will need to be more vigilant than ever, investing in advanced security measures and ensuring that they are compliant with any new regulations that may arise as a result of this incident. The stakes are high, and the time for action is now.
