Back to the archive
Incident file · 2023
MGM Resorts
Hospitality & gaming · United States · Threat actor: Scattered Spider / ALPHV
Phishing
Ransom refused
- US$30.0m
- Ransom demanded
- No
- Ransom paid
- 10 days
- Estimated downtime
- US$100m
- Est. revenue lost
What happened
A social-engineering call to the IT service desk delivered privileged access, disabling hotel keys, slots and booking systems.
How it ended
Declined to pay; reported US$100m of quarterly impact and US$10m of one-off response costs.
Data affected
~10.6 million guests
Would your business survive this incident?
We stress-test detection, response and recovery so a ransom demand is never your only option.