{"id":289304,"date":"2023-09-12T13:56:26","date_gmt":"2023-09-12T18:56:26","guid":{"rendered":"https:\/\/www.casino.org\/news\/?p=289304"},"modified":"2023-09-13T18:59:30","modified_gmt":"2023-09-13T23:59:30","slug":"las-vegas-casino-cyberattacks-a-timeline","status":"publish","type":"post","link":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/","title":{"rendered":"Las Vegas Casino Cyberattacks: A Timeline"},"content":{"rendered":"

Everyone reading this knows about the cybersecurity attack severely impacting properties operated by MGM Resorts International<\/a> in Las Vegas this week and properties in Maryland, Massachusetts, Michigan, Mississippi, New Jersey, New York, and Ohio. However, this was not Las Vegas\u2019 first experience with cyberterrorism. It\u2019s not even MGM\u2019s.<\/p>\n

\"MGM
The MGM Grand in Las Vegas was among one of 10 MGM Resorts properties in Las Vegas severely impacted by a cyberattack this week. (Image: YouTube\/Coolist, inset: itsec.group)<\/figcaption><\/figure>\n

Cyberattacks aren\u2019t uncommon at Las Vegas casinos. Many don\u2019t get reported, according to Casino.org<\/em>\u2019s own Vital Vegas<\/em> blogger Scott Roeben.<\/a> However several casinos have paid ransoms to get their data or systems back. In fact, according to Roeben, Caesars Entertainment may have been hit last week with a similar attack.<\/p>\n

In the past, public companies weren\u2019t required by law to share the fact they\u2019d been attacked or paid ransoms, often in the millions of dollars.<\/strong><\/p>\n

That changed recently when the\u00a0Securities and Exchange Commission (SEC ) adopted new rules<\/a> requiring the reporting of cybersecurity incidents and the amount of any ransoms paid to resolve them.<\/p>\n

Below is a timeline of the biggest data security attacks suffered by the Vegas casino industry — at least the ones we know about.<\/p>\n

\"Venetian
Venetian was hacked by Iran in retribution to inflammatory statements made by founder\/CEO Sheldon Adelson in 2013. (American Express)<\/figcaption><\/figure>\n

The Venetian\/Palazzo<\/strong><\/h2>\n

February 2014<\/strong><\/p>\n

An act of state-sponsored cyberterrorism decimated systems at the Las Vegas Sands Corporation<\/a> — operator of The Venetian\/Palazzo and Sands Expo and Convention Center — wiping out 75% of the company\u2019s Vegas-based servers and causing an estimated $40 million in equipment costs and data recovery.<\/p>\n

The attack had no financial motive and was apparently orchestrated to punish Sands’ CEO and largest shareholder, billionaire Sheldon Adelson, for comments he made in a panel discussion at Yeshiva University the previous October. During that discussion, Adelson suggested that the U.S. should detonate a nuclear bomb in the Iranian desert if Tehran continued its nuclear program.<\/p>\n

According to former U.S. Director of National Intelligence James Clapper, the Iranian government was behind the attack. A message left on company servers read: “Encouraging the use of Weapons of Mass Destruction, UNDER ANY CONDITION, is a Crime.” The note was signed by the “Anti WMD Team.”\u00a0<\/strong><\/p>\n

Golden Nugget<\/strong><\/h2>\n

May 2014-March 2015
\nMay 2015-December 2015<\/strong><\/p>\n

A payment card breach was discovered at more than 300 casinos, restaurants, and hotels owned by Houston, Tex.-based Landry\u2019s. This included all six of its Golden Nugget casinos.<\/p>\n

Hackers installed a program on the company\u2019s systems that captured payment card info — including cardholder names, card numbers, expiration dates, and internal verification codes — at the company\u2019s food and beverage outlets, spas, and entertainment locations.<\/p>\n

\"Hard
Cyberattacks created hard times for the Hard Rock before it reopened as Virgin Hotels Las Vegas in 2021. (Image: vegasslotsonline.com)<\/figcaption><\/figure>\n

Hard Rock Hotel & Casino<\/strong><\/h2>\n

October 2015-March 2016
\nAugust 2016-March 2017<\/strong><\/p>\n

Customer credit cards were scraped at bars, restaurants, and retain shops in the casino via malware infecting its card processing system. Hotel guest names, card numbers, expiration dates, and CVV codes were stolen.<\/a><\/p>\n

The rock ‘n roll-themed casino discovered the breach after guests complained of fraudulent activity on their credit cards.<\/p>\n

A third-party reservations system called SHS infected multiple hotels, including the Hard Rock, only three months later. That breach granted unauthorized access to credit card information, as well as to reservation information.<\/p>\n

The Hard Rock closed on Feb. 3, 2020, and reopened as Virgin Hotels Las Vegas — presumably with all new card processing systems — the following year.<\/p>\n

MGM Resorts International<\/strong><\/h2>\n

Summer 2019<\/strong><\/p>\n

MGM’s first known major data breach originally resulted in the publishing personal data from about 10 million guests on a Russian hacking forum.<\/p>\n

At the time, MGM admitted that the data was hacked from a cloud server containing \u201ca limited amount of information for certain previous guests.\u201d It noted that the breach did not include financial, payment card, or password data.<\/p>\n

In 2022, however, the cyber threat detection service vpnMentor reported that a subsequent data dump\u00a0 on social messaging channel Telegram exposed personal data obtained during the same breach from around 30 million guests.<\/a><\/strong><\/p>\n

That included the names, postal and e-mail addresses, phone numbers, and dates of birth of MGM customers, including government officials, journalists, and celebrities — such as singer Justin Bieber and Twitter founder Jack Dorsey.<\/p>\n

At one point, all 142 million data sets were available for purchase on the dark web for $2,900.<\/p>\n

Four Queens\/Binion\u2019s Gambling Hall<\/strong><\/h2>\n

Feb. 27-March 5, 2020
\n<\/strong>
\nThese two downtown casinos, both operated by TLC Casino Enterprises, were closed for almost a week after a cyberattack affecting their slot machines and loyalty program and payment systems.<\/p>\n

Dotty’s\u00a0<\/strong><\/h2>\n

Jan. 16, 2021
\n<\/strong>
\nIn addition to a malware event, an unauthorized person accessed certain systems within the company\u2019s network, according to a letter notifying impacted customers of the 120 gaming taverns across Nevada. Personal information was exposed<\/a> — including names, dates of birth, and driver\u2019s license numbers.<\/p>\n

The Palms\u00a0<\/strong><\/h2>\n

Oct. 18-19, 2022<\/strong><\/p>\n

A malware attack took out The Palms Las Vegas website for more than 24 hours, causing Google to label the site with a malware warning.<\/p>\n

The off-Strip casino is owned and operated by the San Manuel Band of Mission Indians in California, one of the nation\u2019s richest gaming tribes, which purchased the Palms from Red Rock Resorts in 2021 for $650 million.<\/p>\n","protected":false},"excerpt":{"rendered":"

Everyone reading this knows about the cybersecurity attack severely impacting properties operated by MGM Resorts International in Las Vegas this week and properties in Maryland, Massachusetts, Michigan, Mississippi, New Jersey, New York, and Ohio. However, this was not Las Vegas\u2019 first experience with cyberterrorism. It\u2019s not even MGM\u2019s. Cyberattacks aren\u2019t uncommon at Las Vegas casinos. […]<\/p>\n","protected":false},"author":78,"featured_media":289317,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[62,21,81886],"tags":[82466,84236,13721,84317,23,84238,81970],"acf":[],"yoast_head":"\nLas Vegas Casino Cyberattacks: A Timeline - Casino.org<\/title>\n<meta name=\"description\" content=\"Everyone reading this knows about the cybersecurity attack severely impacting properties operated by MGM Resorts International in Las Vegas this week and\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Las Vegas Casino Cyberattacks: A Timeline - Casino.org\" \/>\n<meta property=\"og:description\" content=\"Everyone reading this knows about the cybersecurity attack severely impacting properties operated by MGM Resorts International in Las Vegas this week and\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/\" \/>\n<meta property=\"og:site_name\" content=\"Casino.org\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Casino.OrgNews\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-12T18:56:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-13T23:59:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/09\/mgm-.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1111\" \/>\n\t<meta property=\"og:image:height\" content=\"730\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Corey Levitan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Casino_Org\" \/>\n<meta name=\"twitter:site\" content=\"@Casino_Org\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Corey Levitan\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/\",\"url\":\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/\",\"name\":\"Las Vegas Casino Cyberattacks: A Timeline - Casino.org\",\"isPartOf\":{\"@id\":\"https:\/\/www.casino.org\/news\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/09\/mgm-.jpg\",\"datePublished\":\"2023-09-12T18:56:26+00:00\",\"dateModified\":\"2023-09-13T23:59:30+00:00\",\"author\":{\"@id\":\"https:\/\/www.casino.org\/news\/#\/schema\/person\/281fd7b5480c9afb75e84ffb75039f09\"},\"description\":\"Everyone reading this knows about the cybersecurity attack severely impacting properties operated by MGM Resorts International in Las Vegas this week and\",\"breadcrumb\":{\"@id\":\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#primaryimage\",\"url\":\"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/09\/mgm-.jpg\",\"contentUrl\":\"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/09\/mgm-.jpg\",\"width\":1111,\"height\":730},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"News\",\"item\":\"https:\/\/www.casino.org\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Commercial Gaming\",\"item\":\"https:\/\/www.casino.org\/news\/commercial-gaming\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Las Vegas Casino Cyberattacks: A Timeline\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.casino.org\/news\/#website\",\"url\":\"https:\/\/www.casino.org\/news\/\",\"name\":\"Casino.org\",\"description\":\"Latest Casino and Gaming News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.casino.org\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.casino.org\/news\/#\/schema\/person\/281fd7b5480c9afb75e84ffb75039f09\",\"name\":\"Corey Levitan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.casino.org\/news\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/03\/cropped-3-3-96x96.png\",\"contentUrl\":\"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/03\/cropped-3-3-96x96.png\",\"caption\":\"Corey Levitan\"},\"description\":\"Corey Levitan joined Casino.org in 2022 after a long career covering Las Vegas. He currently covers gaming news on the US West Coast, including Las Vegas. Corey spent six years covering the Vegas Strip for the Las Vegas Review-Journal, where he also wrote the most popular humor column in the city\u2019s history. (For \u201cFear and Loafing,\u201d he tried out 176 Vegas jobs, including poker player, blackjack dealer and Follie Bergere dancer.) Corey has won more than 100 local, state and national awards for his journalism, which has also appeared in Rolling Stone, New York Magazine and the New York Post. Corey is a New York native whose hobbies include playing guitar, trying to be a better husband, and arguing with strangers on Facebook. Contact Corey at corey@casino.org.\",\"url\":\"https:\/\/www.casino.org\/news\/author\/corey-levitan\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Las Vegas Casino Cyberattacks: A Timeline - Casino.org","description":"Everyone reading this knows about the cybersecurity attack severely impacting properties operated by MGM Resorts International in Las Vegas this week and","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/","og_locale":"en_US","og_type":"article","og_title":"Las Vegas Casino Cyberattacks: A Timeline - Casino.org","og_description":"Everyone reading this knows about the cybersecurity attack severely impacting properties operated by MGM Resorts International in Las Vegas this week and","og_url":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/","og_site_name":"Casino.org","article_publisher":"https:\/\/www.facebook.com\/Casino.OrgNews","article_published_time":"2023-09-12T18:56:26+00:00","article_modified_time":"2023-09-13T23:59:30+00:00","og_image":[{"width":1111,"height":730,"url":"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/09\/mgm-.jpg","type":"image\/jpeg"}],"author":"Corey Levitan","twitter_card":"summary_large_image","twitter_creator":"@Casino_Org","twitter_site":"@Casino_Org","twitter_misc":{"Written by":"Corey Levitan","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/","url":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/","name":"Las Vegas Casino Cyberattacks: A Timeline - Casino.org","isPartOf":{"@id":"https:\/\/www.casino.org\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#primaryimage"},"image":{"@id":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#primaryimage"},"thumbnailUrl":"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/09\/mgm-.jpg","datePublished":"2023-09-12T18:56:26+00:00","dateModified":"2023-09-13T23:59:30+00:00","author":{"@id":"https:\/\/www.casino.org\/news\/#\/schema\/person\/281fd7b5480c9afb75e84ffb75039f09"},"description":"Everyone reading this knows about the cybersecurity attack severely impacting properties operated by MGM Resorts International in Las Vegas this week and","breadcrumb":{"@id":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#primaryimage","url":"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/09\/mgm-.jpg","contentUrl":"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/09\/mgm-.jpg","width":1111,"height":730},{"@type":"BreadcrumbList","@id":"https:\/\/www.casino.org\/news\/las-vegas-casino-cyberattacks-a-timeline\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"News","item":"https:\/\/www.casino.org\/news\/"},{"@type":"ListItem","position":2,"name":"Commercial Gaming","item":"https:\/\/www.casino.org\/news\/commercial-gaming\/"},{"@type":"ListItem","position":3,"name":"Las Vegas Casino Cyberattacks: A Timeline"}]},{"@type":"WebSite","@id":"https:\/\/www.casino.org\/news\/#website","url":"https:\/\/www.casino.org\/news\/","name":"Casino.org","description":"Latest Casino and Gaming News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.casino.org\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.casino.org\/news\/#\/schema\/person\/281fd7b5480c9afb75e84ffb75039f09","name":"Corey Levitan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.casino.org\/news\/#\/schema\/person\/image\/","url":"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/03\/cropped-3-3-96x96.png","contentUrl":"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/03\/cropped-3-3-96x96.png","caption":"Corey Levitan"},"description":"Corey Levitan joined Casino.org in 2022 after a long career covering Las Vegas. He currently covers gaming news on the US West Coast, including Las Vegas. Corey spent six years covering the Vegas Strip for the Las Vegas Review-Journal, where he also wrote the most popular humor column in the city\u2019s history. (For \u201cFear and Loafing,\u201d he tried out 176 Vegas jobs, including poker player, blackjack dealer and Follie Bergere dancer.) Corey has won more than 100 local, state and national awards for his journalism, which has also appeared in Rolling Stone, New York Magazine and the New York Post. Corey is a New York native whose hobbies include playing guitar, trying to be a better husband, and arguing with strangers on Facebook. Contact Corey at corey@casino.org.","url":"https:\/\/www.casino.org\/news\/author\/corey-levitan\/"}]}},"_links":{"self":[{"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/posts\/289304"}],"collection":[{"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/users\/78"}],"replies":[{"embeddable":true,"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/comments?post=289304"}],"version-history":[{"count":5,"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/posts\/289304\/revisions"}],"predecessor-version":[{"id":289598,"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/posts\/289304\/revisions\/289598"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/media\/289317"}],"wp:attachment":[{"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/media?parent=289304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/categories?post=289304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.casino.org\/news\/wp-json\/wp\/v2\/tags?post=289304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}