Impact: Personal information of some MGM customers and data of 41,397 Maine residents stolen were from Caesars.
Financial losses: Caesars decided to pay the extortionists $15 million while MGM declined and recovered its infrastructure on its own which resulted in a loss of $100 million.
The ALPHV/BlackCat group’s claimed affiliate, Scattered Spider attacked Caesars and MGM, two of the biggest U.S. hotel and casino chains. The attack resulted in the shutdown the companies’ entire infrastructure, including the main website and mobile app, online reservations, ATMs, slot machines, and credit card machines. The attack was launched by using social engineering to identify an IT employee on LinkedIn. While Caesars consented to pay, MGM declined to pay any ransom and instead focused on recovering its infrastructure.