Empire State Review Team 
MGM Resorts International: Ransomware Attack Update and Lawsuit Settlement
In recent developments, MGM Resorts International has announced a $45 million settlement related to lawsuits stemming from two data breaches. This announcement comes in the wake of a ransomware attack that occurred in September 2023, impacting some of the company’s casino and hotel computer systems across the United States.
Settlement Eligibility and Compensation
Customers who have stayed at MGM properties during two specific time periods may be eligible for compensation. Those who checked in around July 2019 or September 2023 are advised to review their eligibility. The settlement offers several types of payments to affected individuals:
- Documented Loss Cash Payment: Claimants may receive up to $15,000 for documented financial losses due to the data breach.
- Tiered Cash Payments: Flat payments based on the type of personal information exposed. These include:
- Tier 1 Cash Payment: An estimated $75 for exposure of Social Security or military identification numbers.
- Tier 2 Cash Payment: An estimated $50 for exposure of passport or driver’s license numbers.
- Tier 3 Cash Payment: An estimated $20 for exposure of names, addresses, or dates of birth.
- Financial Account Monitoring: All eligible members can receive one year of financial account monitoring services.
Recent Cybersecurity Breach Overview
The ransomware attack in September 2023 led MGM Resorts to shutdown certain systems to protect sensitive data effectively. Although details on the nature of the breach are limited, it was confirmed that various personal details, including names, addresses, email addresses, birth dates, and in some cases, Social Security and driver’s license numbers, were accessed by unauthorized parties.
MGM Resorts operates numerous properties in Las Vegas, including iconic venues such as the MGM Grand, Bellagio, and Luxor, among others.
How to Claim Compensation
Guests wishing to claim benefits from the settlement must submit a valid Claim Form:
- The deadline for submission is June 3, 2025, and claims can be made online or postmarked by this date.
Options for Affected Individuals
Individuals have several options regarding their participation in the settlement:
- Submit a Claim Form: Must be completed to receive any benefits.
- Opt Out: Gives up all settlement benefits but preserves the right to file a lawsuit individually.
- Object to the Settlement: Provides an opportunity to express disagreement, with a May 19, 2025, deadline to file an objection.
- Do Nothing: Results in no benefits and forfeits legal rights related to the case.
Conclusion
As MGM Resorts moves forward from the breach and subsequent legal proceedings, affected guests are encouraged to stay informed about their rights and potential compensation through the ongoing settlement process. For more comprehensive details, visit the official settlement website. This situation underscores the importance of data security and the potential risks associated with digital transactions.
