Data breach
MGM Resorts (2022 Update)mgmresorts.com
24 842 001 accounts exposed in a breach dated 2019-07-25.
Breached2019-07-25Added to HIBP2022-05-29 UTCUpdated by HIBP2022-05-29 UTCAccounts24 842 001Domainmgmresorts.com
Verified
What happened in Have I Been Pwned’s words
In July 2019, MGM Resorts discovered a data breach of one of their cloud services. The breach included 10.6M guest records with 3.1M unique email addresses stemming back to 2017. In May 2022, a superset of the data totalling almost 25M unique email addresses across 142M rows was extensively shared on Telegram. On analysis, it's highly likely the data stems from the same incident with 142M records having been discovered for sale on a dark web marketplace in mid-2020. The exposed data included email and physical addresses, names, phone numbers and dates of birth.
Exposed data as HIBP classifies it
- Dates of birth
- Email addresses
- Names
- Phone numbers
- Physical addresses
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC