MGM Resorts Data Breach Settlement: $45M

Individuals whose private information was compromised due to two separate data breaches at MGM Resorts International in July 2019 and/or September 2023.

This includes customers and guests whose names, addresses, phone numbers, email addresses, and dates of birth were accessed. Affected individuals with more sensitive data exposed—such as driver’s license numbers, passport numbers, Social Security numbers, or military ID numbers—may qualify for additional compensation.

Documentation of financial losses, such as:

• Credit card or bank statements showing fraudulent transactions
• Invoices or receipts for identity theft services
• Phone or mailing records related to security issues
• Credit freeze expenses
• Attorney or professional service fees related to fraud or identity theft

MGM Resorts has reached a $45 million settlement to resolve claims that it failed to protect customer data, leading to two separate cyberattacks that compromised millions of customers’ personal information.

The class action lawsuit alleges that unauthorized individuals infiltrated MGM’s network and accessed sensitive guest details during two security breaches:

• July 2019: Customer data, including names, addresses, and phone numbers, was stolen.
• September 2023: A separate security failure resulted in the exposure of more sensitive information, including Social Security numbers and government-issued IDs.

Plaintiffs argue that MGM failed to implement sufficient cybersecurity measures to prevent the attacks, putting guests at risk of identity theft, fraud, and financial losses. The lawsuit claims the company did not act quickly enough to address the vulnerabilities or notify affected individuals in a timely manner.

MGM denies any wrongdoing but has agreed to settle the case to avoid further litigation.

Under the Terms of the Settlement

Class members may claim up to $15,000 in reimbursement for documented financial losses, including:

• Unreimbursed fraud or identity theft losses
• Legal fees or credit repair costs
• Expenses for credit freezes, monitoring services, or fraud alerts
• Other costs related to identity recovery

Affected customers can also receive a cash payment based on the type of personal information exposed:

• $75 if your Social Security number or military ID was compromised (Tier 1)
• $50 if your passport or driver’s license number was compromised (Tier 2)
• $20 if your name, address, and/or date of birth was exposed (Tier 3)

If fewer claims are submitted, cash payments may increase. However, if the number of claims exceeds the settlement amount, payments may be reduced accordingly. Class members can also enroll in one year of identity theft protection and credit monitoring, including three-bureau credit monitoring and $1 million in fraud insurance coverage.

This settlement aims to compensate affected customers while holding MGM accountable for its alleged failure to safeguard personal information.