MGM Resorts President and CEO Bill Hornbuckle recently released an update on the impact of cyberattacks against the company. Hornbuckle noted that MGM’s systems have “returned to normal.”
Weeks ago, the cyberattack on the company shut down some of its computer systems and affected its operations nationwide. According to the company’s website, certain promotional offers from the rewards program remain unavailable.
The company said on its website regarding the incident, “We appreciate your patience as we work to restore certain website and mobile app functionalities, including accessibility to your MGM Rewards account, mobile check-in/check-out and digital keys.
“Please note that certain promotional offers may be unavailable. MGM Rewards members’ accounts will be adjusted to reflect Tier Credits and MGM Rewards points at a later date.”
In Hornbuckle’s letter to MGM customers, he explained that swift action from MGM quickly contained the effect of the cyberattacks.
He said in the letter, “As previously reported, sophisticated criminal actors recently launched a cyberattack on MGM Resorts’ IT systems.
"We responded swiftly, shut down our systems to mitigate risk to customer information, and began a thorough investigation of the attack, including coordinating with federal law enforcement agencies and working with external cybersecurity experts.
“While we experienced disruptions at some of our properties, operations at our affected properties have returned to normal and the vast majority of our systems have been restored. We also believe that this attack is contained.”
Hornbuckle went on to note that customer financial account information was not compromised.
He commented, “We have determined that because of our fast, early response, the incident did not result in a compromise of any customer bank account numbers or payment card information.
“We do understand that the criminal actors obtained certain personal information belonging to some customers who transacted with us prior to March 2019.
"This includes name, contact information, gender, date of birth and driver’s license number. The types of impacted information varied by individual. We also believe a more limited number of social security numbers and passport numbers were obtained. We have no evidence that the criminal actors have used this data to commit identity theft or account fraud.”
