FBI Investigate Cybersecurity Incident At MGM Resorts International

MGM Resort was hit by a ransomware attack. (photo: twitter @MGMResortsIntl)

The FBI announced on Wednesday September 13 that it was investigating a cybersecurity incident at the giant MGM Resorts International gambling house which has left several casino operator systems paralyzed for three consecutive days.

The MGM, which manages 31 hotels and gambling venues around the world, including in Macau, announced on Monday 11 September that it was closing some of their computer systems due to unexplained "cybersecurity concerns", and they are working closely with law enforcement and cybersecurity experts to investigate the matter.

The scale and impact of the incident is unclear, but posts on social media show a malfunctioning slot engine and long queues when disruptions hit some of the group's properties in Las Vegas.

pic.twitter.com/Ir6IhOdN9X

— MGM Resorts (@MGMResortsIntl) September 12, 2023

pic.twitter.com/Ir6IhOdN9X

rating agency Moody's warned that the incident could have a negative impact on MGM's credit rating.

This kind of breach is a signature of a ransomware incident in which extorsionists encrypt the victim's computer system and demand ransom in digital currency. It is not yet clear who is behind the issue and what data, if any, has been stolen from the MGM system.

Analysts say the casino is the main target of cybercrime committed for financial motives.

"They are more likely to be paid because they interfered with casino operations," said Allan Liska, an intelligence analyst at security firm Recorded Future. "Kasino around the world should be vigilant because ransomware groups like to get this kind of attention, so we're likely to see impersonators."

The FBI said it had opened an investigation into the incident but declined to provide further details.

Analyst Moody's said in a report that the incident "underlined the main risks related to business operations (MGM) that rely heavily on technology and operational disruptions caused when the system has to go offline or not operating."

Messages seeking further comment from MGM and the US Cybersecurity Supervisory Agency (CISA) were not immediately answered. The MGM Resorts website is currently "not available," according to a message posted on the group's homepage.

"Our investigation is still ongoing and we are working diligently to determine the nature and scope of this problem," MGM said in a post on social media website X last Monday.