MGM Resorts Bounces Back After Ransomware Attack, Restores Services
MGM Resorts International Inc., the renowned hotel and casino company, has successfully restored its services following a devastating ransomware attack. The cyberattack, which occurred on September 10, wreaked havoc on MGM’s systems across the United States, impacting crucial services like online reservations, ATMs, credit card machines, and even slot machines and room key systems in Las Vegas.
While MGM Resorts has yet to officially disclose the specific details of the attack, reports have linked it to the ALPHV/BlackCat ransomware group. The ransomware group is believed to have compromised the company by initiating a conversation with the MGM Resorts helpline. Another group, known as Scatter Spider, has also been associated with the attack. This group was previously linked to a similar incident involving casino operator Caesars Entertainment Inc.
Ransomware affiliates like Scatter Spider collaborate with ransomware creators, such as ALPHV/BlackCat, to deploy ransomware within victim networks. They may also handle tasks like data theft or extortion based on their respective expertise.
However, there is good news. MGM Resorts announced on September 20 that their hotel and casino services are now operating normally. This significant development marks a successful recovery from the cyberattack, alleviating concerns about prolonged downtime and financial losses.
The MGM Resorts attack has shed light on the urgent need to enhance cybersecurity measures, not only for large companies like MGM but across all organizations. Lisa Plaggemier, Executive Director at the National Cybersecurity Alliance, emphasized the deficiencies in MGM’s cyber infrastructure, stating that the incident serves as a stark reminder of the critical weaknesses that exist. Plaggemier called for robust investment in cyber infrastructure, including regular security audits and comprehensive employee training programs, to effectively combat future threats.
Roger Neal, Chief Product Officer at cybersecurity company Apona Security, echoed this sentiment, emphasizing that the attack should serve as a wake-up call for organizations worldwide. Neal highlighted the ever-present cyber threats that organizations must confront in today’s digital landscape, stressing that no company, regardless of its size or reputation, is exempt from such attacks.
As the MGM Resorts cyberattack comes to a close, it serves as a reminder of the importance of maintaining cybersecurity resilience. Organizations must prioritize investments in robust cyber infrastructure, comprehensive training programs, and regular security audits to mitigate the risks associated with cyber threats. By doing so, they can effectively protect their systems, reputation, and the sensitive data of their customers.
