CAESAR's and MGM CYBER-ATTACKED

**consom888** · 09-14-23, 06:10 PM

Originally posted by stevenash

Caesars paid millions in ransom to cybercrime group prior to MGM hack (msn.com)

Props to them if they negotiated the 30 mill down to 15! Dangerous precedent comes with paying the ransom -encourages more hackers to attack these corps.

On the other hand, MGM didn't pay and still down for the 4th day losing much more in revenue and damage to its brand from not paying.

Wish the hackers could mess with the slot machines and make them all pay out crazy

**stevenash** · 09-14-23, 06:20 PM

Originally posted by consom888

Props to them if they negotiated the 30 mill down to 15! Dangerous precedent comes with paying the ransom -encourages more hackers to attack these corps.

Slippery slope indeed.
I, for one, prescribe to the *never* negotiate with kidnappers philosophy.
Even though Caesar's is up and running now, chances are they'll get attacked again.
I think the powers that be (Tom Reeg?) got bad advice.

I'm sure Eldorado Group now has hired a team of 'cyber detectives' to prevent a repeat, but it's costly.

**Headsterx** · 09-14-23, 06:29 PM

Originally posted by stevenash

Slippery slope indeed.
I, for one, prescribe to the *never* negotiate with kidnappers philosophy.
Even though Caesar's is up and running now, chances are they'll get attacked again.
I think the powers that be (Tom Reeg?) got bad advice.

I'm sure Eldorado Group now has hired a team of 'cyber detectives' to prevent a repeat, but it's costly.

I remembered hearing about these stories several years ago where they would target local cities/governments and some would pay up. I always wonder why they wouldn't attack casinos and thought maybe casinos had great cybersecurity. I guess not.

**Optional** · 09-14-23, 07:31 PM

Ugly...

As a result of our investigation, on September 7, 2023, we determined that the unauthorized actor acquired a copy of, among other data, our loyalty program database, which includes driver’s license numbers and/or social security numbers for a significant number of members in the database. We are still investigating the extent of any additional personal or otherwise sensitive information contained in the files acquired by the unauthorized actor. We have no evidence to date that any member passwords/PINs, bank account information, or payment card information (PCI) were acquired by the unauthorized actor.

We have taken steps to ensure that the stolen data is deleted by the unauthorized actor, although we cannot guarantee this result. We are monitoring the web and have not seen any evidence that the data has been further shared, published, or otherwise misused. Nonetheless, out of an abundance of caution, we are offering credit monitoring and identity theft protection services to all members of our loyalty program. To sign up for these services, members may call (888) 652-1580 from 9:00 a.m. to 9:00 p.m. Eastern Time, Monday through Friday other than holidays.

Additionally, we will be notifying individuals affected by this incident consistent with our legal obligations. These notifications will be made on a rolling basis in the coming weeks. In the meantime, individuals with questions may contact the dedicated incident response line we have established to address questions about this incident, which can be reached at (888) 652-1580 from 9:00 a.m. to 9:00 p.m. Eastern Time, Monday through Friday other than holidays.

SEC.gov | Request Rate Threshold Exceeded

https://www.sec.gov/ix?doc=/Archives/edgar/data/0001590895/000119312523235015/d537840d8k.htm

**Fishhead** · 09-14-23, 08:20 PM

karma

**ThaTopMoron** · 09-14-23, 10:19 PM

robbing casinos ain't what it used to be...

what do you think Danny Ocean?

**gauchojake** · 09-14-23, 11:32 PM

THAT'S FOR 6/5 BLACKJACK YOU MOTHERFUKKERS

**gauchojake** · 09-15-23, 12:12 AM

Good news my Caesars sports book account has been suspended lol

**Headsterx** · 09-15-23, 12:15 AM

Originally posted by gauchojake

THAT'S FOR 6/5 BLACKJACK YOU MOTHERFUKKERS

And triple zeros!

😂😂😂

**GunShard** · 09-15-23, 05:21 AM

I joined FanDuel because you don't need to verified ID just use Paypal to verify. Caesars requires verified ID and I denied their request. Glad I ignored Caesars or those hackers would gotten my ID as well.

**d2bets** · 09-15-23, 07:52 AM

Originally posted by gauchojake

Good news my Caesars sports book account has been suspended lol

What state?

**PD77** · 09-15-23, 08:11 AM

Maybe the DOJ can get the ransom back for Caesar’s like they did for Colonial Pipeline. What are the chances the FBI just happened to be in possession of the hackers private keys in that one? I guess the hackers were just extremely careless with their private keys…..cough.

Recovery of Colonial Pipeline ransom funds highlights traceability of cryptocurrency, experts say - Thomson Reuters Institute

https://www.thomsonreuters.com/en-us/posts/investigation-fraud-and-risk/colonial-pipeline-ransom-funds/#:~:text=On%20June%207%2C%20the%20DOJ,disruptive%20U.S.%20cyberattack%20on%20record.

The US Justice Department's seizure of ransom paid by Colonial Pipeline to hackers shows that cryptocurrency funds may not be that untraceable after all.

**gauchojake** · 09-15-23, 08:26 AM

Originally posted by d2bets

What state?

NV but I don't live there, I'm in CA.

**str** · 09-15-23, 08:48 AM

Was that a parlay boost payout?

**daneault23** · 09-16-23, 12:35 AM

The hackers found an MGM employee's Linkedin profile, impersonated them on a 10 min phone call to MGM's IT help desk to obtain access and infected their systems that way.

**PD77** · 09-16-23, 09:59 AM

Originally posted by daneault23

The hackers found an MGM employee's Linkedin profile, impersonated them on a 10 min phone call to MGM's IT help desk to obtain access and infected their systems that way.

Must’ve been an employee with elevated access, at least I hope. MGM will lay blame on a vendor and offer two free years of credit monitoring from Experian, which is another scam if you ask me. I can’t tell you how how many places have leaked my identity. They all blame vendors and take no responsibility. My SSN might as well be posted on billboard. They need to quit using SSN’s for credit, they weren’t designed for that purpose. It wasnt that long ago that you DL # was your SSN #.

**LongBall52** · 09-16-23, 10:01 AM

Originally posted by pd77

must’ve been an employee with elevated access, at least i hope. Mgm will lay blame on a vendor and offer two free years of credit monitoring from experian, which is another scam if you ask me. I can’t tell you how how many places have leaked my identity. They all blame vendors and take no responsibility. My ssn might as well be posted on billboard. They need to quit using ssn’s for credit, they weren’t designed for that purpose. It wasnt that long ago that you dl # was your ssn #.

exactly!

**LongBall52** · 09-16-23, 10:03 AM

This is going to get worse if something serious is not done

**stevenash** · 09-16-23, 10:46 AM

^
Sloppy, shame on MGM.

It's common practice for HR departments to check all social media accounts of their employees before they're offered a position.

The insurance company I work for in Connecticut HR has two ex-FBI employees whose job it is to just that, check social media accounts of potential new hires.

**statguy** · 09-16-23, 11:01 AM

That's gutsy. It's only getting worse. Had my first triple authentication last week to log into an account. I needed a password initially, of course. Then a Captcha. Then a txt to my phone. Russian and North Korean AI bots will own the planet soon.

**Fishhead** · 09-16-23, 01:19 PM

Originally posted by gauchojake

THAT'S FOR 6/5 BLACKJACK YOU MOTHERFUKKERS

.....and paid parking

**Stallion** · 09-16-23, 10:18 PM

And the resort fees....

**Keith Richard** · 10-16-23, 12:18 PM

I haven't received my withdrawal from over 2 weeks into my account. Contacted them for an inquiry. It appears to me they sent it to an account I don't own. Waiting to hear back after they investigate supposedly.

**Thefix13** · 10-16-23, 12:56 PM

And state books were supposed to be better...

**stevex** · 10-16-23, 02:53 PM

This probably explains why I'm not getting any reload bonuses from my account manager.

**Optional** · 10-16-23, 03:21 PM

Originally posted by Keith Richard

I haven't received my withdrawal from over 2 weeks into my account. Contacted them for an inquiry. It appears to me they sent it to an account I don't own. Waiting to hear back after they investigate supposedly.

That would not be easy to do by accident.

But you would also think we would have heard of the issue from others before now if it was connected to the hacker problem.

Please let us know anything more you hear about it.

**Keith Richard** · 10-16-23, 05:18 PM

Originally posted by Optional

That would not be easy to do by accident.

But you would also think we would have heard of the issue from others before now if it was connected to the hacker problem.

Please let us know anything more you hear about it.

It's a small amount and my first withdrawal with them so I've tried to be very patient. They were escalating the matter after me sending my documents. I'm sure it will be resolved eventually.

**Keith Richard** · 10-17-23, 10:32 AM

Originally posted by Keith Richard

It's a small amount and my first withdrawal with them so I've tried to be very patient. They were escalating the matter after me sending my documents. I'm sure it will be resolved eventually.

Bad news is withdrawal was declined after failure because of wrong bank info. Good news is they deposited money back into my SB account. I'm fine with that. The bank numbers I supplied them are different than the numbers they attempted to send to for some reason. I know my bank details were correct. I will just attempt to withdraw to a different account if balance grows appreciably.

**Optional** · 10-17-23, 12:27 PM

At least it wasn't a serious problem I guess. Thanks for letting us know Keith.

**OldBill** · 10-17-23, 04:55 PM

Originally posted by Thefix13

And state books were supposed to be better...

ummmmmmmmmm they are better i place wagers with cash get tickets go back same day or next cash out