MGM will pay $45 million to settle data breach lawsuit

MGM Resorts International has agreed to pay $45 million to settle a lawsuit over data breaches that collectively exposed the personal information of 37 million customers. The case consolidated 22 class-action lawsuits filed over two security incidents: a data breach in 2019, and a ransomware attack in 2023.

Lawyers for the victims said in district court filings that both data breaches saw hackers access MGM’s systems and obtain identifiable customer data, including names, addresses, phone numbers, email addresses, dates of birth, and passport…