FEDERALItem 7.01 · voluntary (Reg FD)HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTPIICriticalContained
MGM RESORTS INTERNATIONAL
bd_6bbbeaea01c0cd31 · schema v1 · pii pii-v1
Full breach record for MGM RESORTS INTERNATIONAL →MGM Resorts International disclosed a cybersecurity incident identified on September 12, 2023. Criminal actors accessed customer data including names, contact info, driver's license numbers, and for some, SSNs and passports. Data dates back to March 2019. The incident was contained, systems restored, and free credit monitoring offered. Estimated financial impact is ~$100M in Q3 2023 EBITDAR.
SEC clockMateriality determined Oct 5, 2023 → Filed Oct 5, 20230d ✓ SEC 4-day OK23 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 12 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_05c59c84e811817fWashington State AGfiled 2023-10-05Candidate
- bd_25f570b90148b65eOregon State AGfiled 2023-10-05Verified
- bd_2cf9544a4111fecbVermont State AGfiled 2023-10-05Verified
- bd_36e2c8e1303bff37Delaware State AGfiled 2023-10-05Verified
Show 6 more filings ↓Show fewer ↑up to 61d gap
- bd_4e28f4a3e508d542Maine State AGfiled 2023-10-05Verified
- bd_65dbfae801fc66abDelaware State AGfiled 2023-10-05Verified
- bd_e80691128547fd2dDelaware State AGfiled 2023-10-05Verified
- bd_ee40948044b421adMontana State AGfiled 2023-10-05Verified
- bd_a165e7cc6b9dc225South Carolina State AGBlackCatfiled 2023-10-06(1d gap)Verified
- bd_0171facdc96060a9California State AGfiled 2023-12-05(61d gap)Verified
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/789570/000119312523251667/
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Oct 5, 2023
- Raw hash
- 6ddff145b8675d7e36577703c689314f86082a39f0bf859599eda562c8fe4598
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- MGM RESORTS INTERNATIONALnorm: mgm resorts
- SEC CIK
- 0000789570
Victim entity
- Name
- MGM RESORTS INTERNATIONALnorm: mgm resorts
- SEC CIK
- 0000789570
Incident
- Discovered
- Sep 12, 2023
- Materiality determined
- Oct 5, 2023
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 0d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Oct 5, 2023→ Filed: Oct 5, 20230d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.