A new hacking group called Scattered Spider has claimed responsibility for the theft of six terabytes of data from casino operators MGM Resorts International and Caesars Entertainment. The group stated that it did not plan to make the data public and did not indicate whether it had requested a ransom from the companies. Both MGM and Caesars acknowledged the breaches but did not comment on the extent of the data that was stolen.
Caesars revealed on Thursday that it had discovered a breach in which data on a large number of its loyalty program members was compromised, including driver’s license numbers and social security numbers. While there were initial reports that Caesars had paid a ransom, the company declined to comment on the matter. MGM, on the other hand, stated that it was working with law enforcement to address the cybersecurity issue.
Scattered Spider, also known as UNC3944, is a highly disruptive hacking group based in the United States. The group employs effective social engineering tactics, often pretending to be an employee needing a password reset to deceive information security teams. It has been linked to over 100 intrusions in various industries, including gaming, technology, retail, telecom, and insurance.
The FBI is currently investigating the incidents at MGM and Caesars. The cyberattack on these major casino operators highlights the ongoing threat of cybercrime and the need for robust cybersecurity measures in the gaming industry.
In conclusion, Scattered Spider’s hacking activities have caused significant disruption for casino operators MGM Resorts International and Caesars Entertainment. The theft of six terabytes of data highlights the growing threat of cyberattacks and emphasizes the importance of strong cybersecurity protocols in the face of increasingly sophisticated hacking groups.
Definitions:
- Scattered Spider: A hacking group responsible for stealing data from various companies, including MGM Resorts International and Caesars Entertainment.
- MGM Resorts International: A multi-billion-dollar casino and hotel operator.
- Caesars Entertainment: A multi-billion-dollar casino and entertainment company.
- Social engineering: Deceptive tactics used by hackers to manipulate individuals into divulging sensitive information or performing actions that compromise security.
Sources: Reuters