MGM ‘cybersecurity issue’ shuts down slot machines and ATMs in Las Vegas casinos

3

Illustration by Carlo Cadenas / The Verge

A “cybersecurity issue” at MGM Resorts has forced the famous hotel and casino company to shut down many of its systems, according to a statement the company posted just before noon ET on X (formerly Twitter). Late on Monday evening, MGM shared another message on X, saying, “…our resorts, including dining, entertainment, and gaming, are currently operational, and continue to deliver the experiences for which MGM is known,” and that front desk staff can assist guests as needed.

A ransomware group named ALPHV / BlackCat claimed responsibility, according to a post on X, formerly Twitter, from malware tracker vx-underground (via Engadget), saying they received the information directly. The unverified post alleges that the group used a social engineering attack, calling the company’s help desk with an MGM Resorts employee’s information they found on LinkedIn.

MGM replaced its homepage with a message apologizing for the site’s outage and providing a list of concierge phone numbers at several locations, like the Aria, The Cosmopolitan, Mandalay Bay, Bellagio, New York-New York, and Vdara.

The issue isn’t limited to MGM’s Las Vegas locations. NBC 10 News in Philadelphia reports that MGM’s Borgata Hotel in Atlantic City was likewise affected by the attack, though hotel representatives didn’t say how. MGM Grand Detroit Casino is also affected, reports Play Michigan, with an X user posting that the casino “has all games running” but that digital keys and MGM’s rewards program are down.

ABC 13 News in Las Vegas confirms the FBI is currently investigating and has been in contact with MGM since Sunday. The outlet reports that hotel guests were unable to access ATMs, buy food, or use their digital room keys. Posts from hotel guests on Monday said staff were using pencil and paper to keep track of things.

A post on X this morning showed disabled slot machines at the Aria Resort and Casino in Las Vegas. The X account Las Vegas Locally claimed in a post citing “an insider” that MGM Resorts is the victim of a ransomware attack, though that has not been confirmed. Another X user named Murphy posted a picture they say is from MGM Grand, where slot machines are also apparently out of service.

Update September 12th, 1PM ET: Added the most recent update from MGM.

Update September 13th, 12:10PM ET: Added claims reported by vx-underground.