Open Nav
Sign Up

MGM Resorts Cyberattack Shuts Down Website and Brings Systems Offline

MGM resort cyberattack

OPInnovate Research

September 12, 2023

MGM Resorts, a renowned international hotel and casino company, has been hit by a cyberattack that has forced the shutdown of its website and computer systems. Concerns are mounting over potential data breaches and the impact on reservation systems and casino floors.

The company has taken swift action, involving external cybersecurity experts and notifying the FBI.

Impact of the Cyberattack on MGM Resorts’ Operations

The cyberattack on MGM Resorts has resulted in the shutdown of the company’s website and offline systems, impacting operations across multiple locations. The incident, which was first detected on Sunday night, has caused significant disruption to MGM Resorts’ operations.

The company’s websites are currently offline, and screens on casino gaming machines are displaying error messages. This issue isn’t limited to MGM’s Las Vegas locations, as other properties, including the Borgata Hotel in Atlantic City, have also been affected. The impact of the cyberattack can be seen at the MGM Grand Detroit Casino, where digital keys and the rewards program are experiencing issues.

The FBI is currently investigating the cybersecurity issue, and there are reports that MGM Resorts may have been the victim of a ransomware attack, although this claim hasn’t been confirmed. The disabled slot machines observed at MGM Resorts’ properties further indicate the extent of the attack.

This incident serves as a reminder of the increasing scale and mainstream nature of cyber attacks, be it ransomware or general disruptions. It emphasizes the need to be diligent and constantly ensure that your organization is secure.

As well as the need to invest in cybersecurity training and education for employees, this attack highlights the importance of continuous penetration testing for all organizations. While the investigation is still ongoing and the details of the attack and how the attackers managed to breach MGM’s systems are not yet known, it is worth noting that a large majority of attacks originate from vulnerabilities that could have been easily detected and resolved through effective pen testing.

Resources highlights

CVE-2026-25874: Critical Hugging Face LeRobot Vulnerability Enables Unauthenticated RCE

A critical unpatched vulnerability has been disclosed in Hugging Face LeRobot, an open-source robotics platform used for AI-driven robotics research and development. The flaw, tracked…

Read more >

CVE-2026-25874

BlueHammer: Microsoft Defender Privilege Escalation (CVE-2026-33825)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-33825, also known as BlueHammer, to its Known Exploited Vulnerabilities (KEV) Catalog, confirming active exploitation…

Read more >

CVE-2026-33825

CISA Flags Actively Exploited Cisco SD-WAN Vulnerabilities (CVE-2026-20133, CVE-2026-20122, CVE-2026-20128)

CISA has added multiple Cisco Catalyst SD-WAN vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, indicating active exploitation in the wild. These flaws affect SD-WAN…

Read more >

cisco sd-wan

Cyber Warfare Amid the Israel-Iran Conflict: What Organizations Need to Know

Launched in late February, the joint U.S.-Israeli airstrike campaign against Iran (codenamed Operation Epic Fury/Roaring Lion) was quickly met with retaliatory cyberattacks. Iran’s hackers wasted…

Read more >

Iran cyber activity

nginx-ui Unauthenticated Takeover Vulnerability Actively Exploited (CVE-2026-33032)

CVE-2026-33032 is a critical authentication bypass vulnerability affecting nginx-ui (≤ 2.3.5). The issue arises from inconsistent security controls applied to MCP endpoints: while the /mcp…

Read more >

CVE-2026-33032

CISA Flags Actively Exploited Microsoft Office and SharePoint Vulnerabilities (CVE-2009-0238, CVE-2026-32201)

CISA has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, confirming active exploitation in the wild. The inclusion of both a legacy Microsoft…

Read more >

CVE-2009-0238, CVE-2026-32201
Under Cyber Attack?

Fill out the form and we will contact you immediately.