[stevenash]

Caesars paid millions in ransom to cybercrime group prior to MGM hack (msn.com)

[consom888]

Caesars paid millions in ransom to cybercrime group prior to MGM hack (msn.com)

Props to them if they negotiated the 30 mill down to 15! Dangerous precedent comes with paying the ransom -encourages more hackers to attack these corps.

On the other hand, MGM didn't pay and still down for the 4th day losing much more in revenue and damage to its brand from not paying.

Wish the hackers could mess with the slot machines and make them all pay out crazy

[stevenash]

Props to them if they negotiated the 30 mill down to 15! Dangerous precedent comes with paying the ransom -encourages more hackers to attack these corps.

Slippery slope indeed.
I, for one, prescribe to the *never* negotiate with kidnappers philosophy.
Even though Caesar's is up and running now, chances are they'll get attacked again.
I think the powers that be (Tom Reeg?) got bad advice.

I'm sure Eldorado Group now has hired a team of 'cyber detectives' to prevent a repeat, but it's costly.

[Headsterx]

Slippery slope indeed.
I, for one, prescribe to the *never* negotiate with kidnappers philosophy.
Even though Caesar's is up and running now, chances are they'll get attacked again.
I think the powers that be (Tom Reeg?) got bad advice.

I'm sure Eldorado Group now has hired a team of 'cyber detectives' to prevent a repeat, but it's costly.

I remembered hearing about these stories several years ago where they would target local cities/governments and some would pay up. I always wonder why they wouldn't attack casinos and thought maybe casinos had great cybersecurity. I guess not.

[Optional]

Ugly...

As a result of our investigation, on September 7, 2023, we determined that the unauthorized actor acquired a copy of, among other data, our loyalty program database, which includes driver’s license numbers and/or social security numbers for a significant number of members in the database. We are still investigating the extent of any additional personal or otherwise sensitive information contained in the files acquired by the unauthorized actor. We have no evidence to date that any member passwords/PINs, bank account information, or payment card information (PCI) were acquired by the unauthorized actor.

We have taken steps to ensure that the stolen data is deleted by the unauthorized actor, although we cannot guarantee this result. We are monitoring the web and have not seen any evidence that the data has been further shared, published, or otherwise misused. Nonetheless, out of an abundance of caution, we are offering credit monitoring and identity theft protection services to all members of our loyalty program. To sign up for these services, members may call (888) 652-1580 from 9:00 a.m. to 9:00 p.m. Eastern Time, Monday through Friday other than holidays.

Additionally, we will be notifying individuals affected by this incident consistent with our legal obligations. These notifications will be made on a rolling basis in the coming weeks. In the meantime, individuals with questions may contact the dedicated incident response line we have established to address questions about this incident, which can be reached at (888) 652-1580 from 9:00 a.m. to 9:00 p.m. Eastern Time, Monday through Friday other than holidays.

https://www.sec.gov/ix?doc=/Archives...d537840d8k.htm

[Fishhead]

karma

[ThaTopMoron]

robbing casinos ain't what it used to be...

what do you think Danny Ocean?

[gauchojake]

THAT'S FOR 6/5 BLACKJACK YOU MOTHERFUKKERS

[gauchojake]

Good news my Caesars sports book account has been suspended lol

[Headsterx]

THAT'S FOR 6/5 BLACKJACK YOU MOTHERFUKKERS

And triple zeros!

😂😂😂

[GunShard]

I joined FanDuel because you don't need to verified ID just use Paypal to verify. Caesars requires verified ID and I denied their request. Glad I ignored Caesars or those hackers would gotten my ID as well.

[d2bets]

Good news my Caesars sports book account has been suspended lol

What state?

[PD77]

Maybe the DOJ can get the ransom back for Caesar’s like they did for Colonial Pipeline. What are the chances the FBI just happened to be in possession of the hackers private keys in that one? I guess the hackers were just extremely careless with their private keys…..cough.

https://www.thomsonreuters.com/en-us...20on%20record.

[gauchojake]

What state?

NV but I don't live there, I'm in CA.

[str]

Was that a parlay boost payout?

[daneault23]

The hackers found an MGM employee's Linkedin profile, impersonated them on a 10 min phone call to MGM's IT help desk to obtain access and infected their systems that way.

[PD77]

The hackers found an MGM employee's Linkedin profile, impersonated them on a 10 min phone call to MGM's IT help desk to obtain access and infected their systems that way.

Must’ve been an employee with elevated access, at least I hope. MGM will lay blame on a vendor and offer two free years of credit monitoring from Experian, which is another scam if you ask me. I can’t tell you how how many places have leaked my identity. They all blame vendors and take no responsibility. My SSN might as well be posted on billboard. They need to quit using SSN’s for credit, they weren’t designed for that purpose. It wasnt that long ago that you DL # was your SSN #.

[LongBall52]

must’ve been an employee with elevated access, at least i hope. Mgm will lay blame on a vendor and offer two free years of credit monitoring from experian, which is another scam if you ask me. I can’t tell you how how many places have leaked my identity. They all blame vendors and take no responsibility. My ssn might as well be posted on billboard. They need to quit using ssn’s for credit, they weren’t designed for that purpose. It wasnt that long ago that you dl # was your ssn #.

exactly!

[LongBall52]

This is going to get worse if something serious is not done

[stevenash]

^
Sloppy, shame on MGM.

It's common practice for HR departments to check all social media accounts of their employees before they're offered a position.

The insurance company I work for in Connecticut HR has two ex-FBI employees whose job it is to just that, check social media accounts of potential new hires.

[statguy]

That's gutsy. It's only getting worse. Had my first triple authentication last week to log into an account. I needed a password initially, of course. Then a Captcha. Then a txt to my phone. Russian and North Korean AI bots will own the planet soon.

[Fishhead]

THAT'S FOR 6/5 BLACKJACK YOU MOTHERFUKKERS

.....and paid parking

[Stallion]

And the resort fees....