We know what you did last summer: MGM’s hotel spinoff lost 10.7m guest records and now they’re on hacker forums

What happens in Vegas… gets leaked on the internet

The MGM Grand hotel in Las Vegas, Nevada (Arina P Habich / Shutterstock)

Casino and hotel chain MGM Resorts lost almost 10.7 million guest records last summer, including the data of Jack Dorsey and Justin Bieber, which was duly posted to hacker forums.

According to soon-to-be-launched leak tracker Under the Breach, which spotted the post this week, the records included email addresses along with names, phone numbers, addresses and dates of birth.

MGM Resorts admitted the hack to ZDNet, which confirmed the accuracy of the records by contacting customers and confirming the dates of their visits to the relevant hotel.

The news site said the leak included details of celebrities, tech CEOs, reporters and government officials as well as “regular tourists and travellers”. Trips by Canadian pop-warbler Bieber, Twitter boss Dorsey and Department of Homeland Security and Transportation Security Administration staff were all slurped.

The hotel company said: “Last summer, we discovered unauthorized access to a cloud server that contained a limited amount of information for certain previous guests of MGM Resorts.”

The chain said no financial information was lost. It informed some customers in accordance with state laws and said it has reviewed security and “enhanced the security of our network to prevent this happening again”.

In news either reassuring or depressing depending on your point of view, Under the Breach informed email-checking service Haveibeenpwned, which found that 82 per cent of the emails had already been revealed thanks to previous breaches. ®

Sponsored: Detecting cyber attacks as a small to medium business