Hackers hijacked personal information including names, addresses, and passport numbers belonged to 142 million guests who stayed at MGM Grand Resorts last year. The organization accepted the hack and they confirmed it to BBC news at the same time.

Among the guests who stayed with the MGM Grand resort included famous stars like Justin Bieber and Twitter founder Jack Dorsey as well. The hack was first reported in February this year by ZDNet. As per the ZDNet report in 2019, the number reported only at 10 million guests. However, according to the deep web vendors, hackers now trying to sell 142 million guests’ information on the dark web. They were trying to sell the data for approximately $2,939 equivalent bitcoin (BTC) or Monero (XMR).

Though MGM Grand says that the hackers are lying regarding the data numbers that they have, hackers now claim they have approximately 142,479,937 guest’s data. Vinny Troia – The founder of Night Lion Security sent an email correspondence mentioning that they did not manage the full database of the property. MGM Grand’s spokesperson also wrote something similar to Cimpanu via email.

MGM Resorts was aware of the scope of this previously reported incident from last summer and has already addressed the situation. The vast majority of data consisted of contact information like names, postal addresses, and email addresses.

The Empire Market advertisement for the MGM Grand data dump

Not the first time for MGM Grand

MGM stand their ground about the data the hackers have. They say that the hackers were unable to take stay details, financial data, or social security numbers. This is not the first time MGM Grand made headlines about their data leaks. Zdnet along with Head of Research of Intel firm KELA – Irina Nesterovsky had a discussion last year when the media got hold of the data breach in February 2019.  

As per the Nesterovsky’s insights, the data dump was sold to some private hacking circles since at least July 2019. Hence, it suggests that the data dump is separated into sections and sold for cryptocurrency over the deep web.