1. Welcome to VegasMessageBoard
    It appears you are visiting our community as a guest.
    In order to view full-size images, participate in discussions, vote in polls, etc, you will need to Log in or Register.

Anyone else get the MGM data breach letter?

Discussion in 'Misc. Vegas Chat' started by phantomfj, Jun 7, 2020.

Thread Status:
Not open for further replies.
  1. phantomfj

    phantomfj High-Roller

    Joined:
    Jul 15, 2015
    Messages:
    683
    Location:
    Courtenay, BC
    Trips to Las Vegas:
    4
    Just got this email today, gee only 11 months after it happened, nice of them to be prompt......


    [​IMG]
    Dear Guest,

    We are writing to notify you of an issue that involves your personal information. On July 10, 2019, we learned that an unauthorized party had accessed and downloaded certain MGM Resorts guest data from an external cloud server a few days earlier. The affected information may have included names, contact information (such as postal addresses, email addresses, and phone numbers), and dates of birth. The specific data affected differed for each impacted individual.

    Promptly after learning of the issue, we took steps to enhance our security measures such as by further strengthening our monitoring capabilities to detect unauthorized system activity. We engaged a leading third-party data security expert to assist with our investigation of the incident and coordinated with law enforcement authorities.

    We recently identified that your information was affected by this issue. We take our obligation to safeguard personal information very seriously and are alerting you so you can take steps to help protect against the risk of misuse of your information. We are providing you with credit monitoring services for one year at no cost to you, and encourage you to follow the instructions below to enroll in these services.

    We hope this information is useful to you. If you have any questions regarding this issue, please contact 1 (888) 261-9692 from 9:00 am - 5:00 pm, Eastern Time. We regret any inconvenience this may cause you.

    Sincerely,


    MGM Resorts International

    ----------------------------------------------------------------------------------------

    Luckily (or not, depending on how you look at it), I already have free credit monitoring from from other data breaches and nothing bad has occurred yet ...... who else is sick and tired of the lax way businesses take care of our data?
     
    • Like Like x 1
  2. flyguyfl

    flyguyfl MIA

    Joined:
    Apr 11, 2014
    Messages:
    3,801
    Trips to Las Vegas:
    75
    Nope.
     
  3. NotFromConcentrate

    NotFromConcentrate It’s a Cassowary :)

    Joined:
    Jul 19, 2015
    Messages:
    9,321
    Location:
    Digital Nomad from Southern Ontario
    Trips to Las Vegas:
    28
    Interesting how...

    1. Their “business hours” are 9-5 eastern when MGM is based in Las Vegas.

    2. Upon a Google search of that phone number, it isn’t linked to anything related to MGM.

    This strikes me as a social engineering scam in which they’re trying to get you to call that number and reveal more personal information.

    I’d just ignore it.
     
    [TENTATIVE Late Jul/Early Aug] Vegas by way of Chicago/Elko/Reno!
    • Agree Agree x 2
    • Informative Informative x 2
  4. nostresshere

    nostresshere Mr. Anti Debit Card

    Joined:
    May 4, 2009
    Messages:
    23,218
    Location:
    TN
    Trips to Las Vegas:
    40
    That was my first though. Possible scam. Look VERY close at the originating email. Not just what it says. Most email systems have a way to look at the source header.

    As to business and being lax. Maybe. Maybe not. Some of these hackers are pretty slick. Just about ANY system can be hacked if folks are smart enough.
     
    • Agree Agree x 1
  5. Chuck2009x

    Chuck2009x VIP Whale

    Joined:
    Apr 5, 2009
    Messages:
    14,199
    Location:
    Boston
    Trips to Las Vegas:
    30
    I think got an email about the breach some time last year, but I couldn't find it. Maybe I wasn't affected. There was a breach and it was pretty bad.

    https://www.zdnet.com/article/exclusive-details-of-10-6-million-of-mgm-hotel-guests-posted-on-a-hacking-forum/

    The delay may be because you are in Canada, or because they have found additional records were affected.

    This thread (link below) is inconclusive. As usual with reddit, half the people have no idea what they're talking about, and you can't trust the legitimacy of ones who sound like they know what they're talking about.

    https://www.reddit.com/r/PersonalFinanceCanada/comments/gxx4j6/mgm_customer_data_breach_1_year_equifax_monitoring/

    Prior discussion here:
    https://www.vegasmessageboard.com/forums/index.php?threads/data-breach-at-mgm-resorts-in-july-2019.165346/

    If you already have credit monitoring in place, I'd do nothing with the email unless Equifax is offering some component of service you're not already getting.
     
    Last edited: Jun 8, 2020
    • Agree Agree x 2
    • Like Like x 1
  6. flyguyfl

    flyguyfl MIA

    Joined:
    Apr 11, 2014
    Messages:
    3,801
    Trips to Las Vegas:
    75
    If your system allows blocking some emails I would do that.
     
  7. pressitagain

    pressitagain VIP Whale

    Joined:
    Aug 15, 2013
    Messages:
    3,323
    Location:
    Toronto, Canada
    Trips to Las Vegas:
    8
    Yes. There was a dats breach. I remember getting the email last year.

    I never followed up. Never called MGM.

    Everything is normal as far as my security.
     
    • Like Like x 2
  8. NotFromConcentrate

    NotFromConcentrate It’s a Cassowary :)

    Joined:
    Jul 19, 2015
    Messages:
    9,321
    Location:
    Digital Nomad from Southern Ontario
    Trips to Las Vegas:
    28
    Ok, so I might have been incorrect. I just called that number from an "anonymous" line posing as somebody who received the email himself. The rep claimed to be with Equifax (Canada) and this number was supposedly set up as a hotline specifically for MGM-related claims... hence why the number didn't show up anywhere else.

    The rep appeared to be pretty competent, and didn't have any of the red flags that a scammer would normally have. Never even attempted to ask/push me for personal information of any kind. He also had a pretty solid French-Canadian accent which to me suggests he actually works at Equifax (since credit bureaus here have to provide service in both English and French, so many of the employees are bilingual).

    The bottom-line result from the conversation was that the email should have included a "promo code" to sign up for the Equifax Premier package for free credit monitoring and other such things, as a result of the July 2019 MGM data breach (which did actually happen). According to folks on the Reddit thread that Chuck posted earlier, people entered that promo code into the Equifax site and it worked. Of course, I'd say to avoid clicking on a link in an email like this, and manually type in the Equifax.ca URL yourself, and enter the promo code from there... but that sounds good enough to me.

    So I'm 90% convinced this is legit. I'd still seek explicit confirmation from MGM that it's the real deal... and if you're interested in the credit services being offered just as a good measure, that promo code on Equifax's Canadian website could well offer you what it's claiming to offer.

    Of course, do not take this as advice of any kind... I'm just sharing the insights I gained from calling the number and finding out a bit more about what they're trying to prompt people to do.
     
    [TENTATIVE Late Jul/Early Aug] Vegas by way of Chicago/Elko/Reno!
    • Like Like x 1
  9. vegasqc

    vegasqc VIP Whale

    Joined:
    Nov 9, 2010
    Messages:
    3,639
    Trips to Las Vegas:
    11
    Got it as well

    First ever MGM email that was bilingual which is a very nice touch

    source of email was [email protected]

    For those who were curious it offers this

    We have purchased a one-year subscription to the Equifax Complete Premier Plan on your behalf.
    • Your unique Activation Code for the Equifax Complete Premier Plan is xxxxxxxxxxxxxx
    • Visit https://myservices.equifax.ca/prem to enroll using the Activation Code. No credit card is required for enrollment.
    • Ensure that you enroll by September 30, 2020 (the code will not work after this date).
     
  10. nostresshere

    nostresshere Mr. Anti Debit Card

    Joined:
    May 4, 2009
    Messages:
    23,218
    Location:
    TN
    Trips to Las Vegas:
    40
    What would you block?
     
  11. phantomfj

    phantomfj High-Roller

    Joined:
    Jul 15, 2015
    Messages:
    683
    Location:
    Courtenay, BC
    Trips to Las Vegas:
    4
    Mine was same as above, I just didn't include the french portion or the equifax signup details in my original post
     
  12. ScubaSteve

    ScubaSteve Tourist

    Joined:
    Aug 20, 2017
    Messages:
    7
    Trips to Las Vegas:
    6
    I also got the same email. I’m hesitant and unsure if it’s actually real.

    There’s also a reddit post with people saying the emails are real and others that say it’s fake.

    I think I’ll try and find an MGM general inquiries email address and ask (so far I’ve only found email address for each hotel).
     
  13. mickyblueeyes

    mickyblueeyes VIP Whale

    Joined:
    May 14, 2017
    Messages:
    1,520
    Trips to Las Vegas:
    51
    I got the same email but the email I have on file with casino resorts isn't linked to anything professional and they don't have my new address or current credit card on file so not going to bother with it. Also doesn't checking Equifax hit your credit score when you check it?
     
  14. monkey

    monkey Low-Roller

    Joined:
    Jun 24, 2004
    Messages:
    133
    My sister got the email but hubby and I did not...assumed it was spam. But now, not so much.
     
  15. Chuck2009x

    Chuck2009x VIP Whale

    Joined:
    Apr 5, 2009
    Messages:
    14,199
    Location:
    Boston
    Trips to Las Vegas:
    30
    If everybody who got the new email is in Canada, I'm guessing that there might have been some legal action that forced MGM to make the free credit protection service available to Canadian residents, and maybe it just took this long for all the legal stuff to get resolved and get it set up.

    The first media reports seemed to be in February, but US customers were notified in August. I couldn't find any email. I don't know if US customers were offered the same thing (or may be in the future).
     
    Last edited: Jun 9, 2020
    • Agree Agree x 3
  16. nostresshere

    nostresshere Mr. Anti Debit Card

    Joined:
    May 4, 2009
    Messages:
    23,218
    Location:
    TN
    Trips to Las Vegas:
    40
    Two things:

    1 - You can check your credit score with the 3 major lenders daily and it has ZERO impact on your score. It only hits when a company does a hard credit pull. And even then, it is only a few points.

    2 - The casino may not have your credit card on file, but if you used it once when you stayed there... well, that is how it gets into their system. If you are saying you have a NEW card, then that clears up things.


    Still, in the end, if somebody does use your credit card - it is no big deal. You do not have to pay and you can easily get a new card.
     
    • Informative Informative x 1
  17. Geddy3

    Geddy3 Low-Roller

    Joined:
    Feb 2, 2013
    Messages:
    440
    Trips to Las Vegas:
    12
    • Like Like x 2
  18. 63hearts

    63hearts Low-Roller

    Joined:
    Aug 30, 2012
    Messages:
    308
    Trips to Las Vegas:
    3
    They waited since July to inform people? Fuck MGM, not stepping foot in another MGM property again.
     
    • Funny Funny x 1
  19. 63hearts

    63hearts Low-Roller

    Joined:
    Aug 30, 2012
    Messages:
    308
    Trips to Las Vegas:
    3
    And we need businesses to realize that a year of credit monitoring is not compensation enough for losing personal data.

    Time for some class action lawsuits and to put a financial penalty to MGM
     
    • Funny Funny x 1
  20. nostresshere

    nostresshere Mr. Anti Debit Card

    Joined:
    May 4, 2009
    Messages:
    23,218
    Location:
    TN
    Trips to Las Vegas:
    40
    Really? Because you read about a data breach and have decided it is not worth doing business with them ever again?

    Wow.
     
    • Funny Funny x 1
Thread Status:
Not open for further replies.