Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Breach occurred 2019-07-25Verifiedmgmresorts.com
What happened
In July 2019, MGM Resorts discovered a data breach of one of their cloud services. The breach included 10.6M guest records with 3.1M unique email addresses stemming back to 2017. In May 2022, a superset of the data totalling almost 25M unique email addresses across 142M rows was extensively shared on Telegram. On analysis, it's highly likely the data stems from the same incident with 142M records having been discovered for sale on a dark web marketplace in mid-2020. The exposed data included email and physical addresses, names, phone numbers and dates of birth.
Data exposed
Frequently asked questions
The MGM Resorts (2022 Update) data breach occurred on July 25, 2019. It was added to Have I Been Pwned's breach catalog on May 29, 2022.
24,842,001 accounts were affected by the MGM Resorts (2022 Update) data breach, according to Have I Been Pwned's records.
The MGM Resorts (2022 Update) breach exposed the following data types: Dates of birth, Email addresses, Names, Phone numbers, Physical addresses.
Yes. Have I Been Pwned has verified the MGM Resorts (2022 Update) breach, meaning there's confirmed evidence the exposed data is genuine and tied to real accounts.
Use KazaSec's free Email Breach Checker (/tools/breach-check) to check whether a specific email address has surfaced in the MGM Resorts (2022 Update) breach, or any other known breach — the tool never stores what you search.
Our free Email Breach Checker tells you whether a specific email address has surfaced in this breach — or any other known breach — without ever storing what you search.
Check your email →Talk to us about this
We help organizations find and fix the gaps that lead to a breach, before they do.