In early September, chaos erupted in the heart of Las Vegas as a daring group of cybercriminals targeted one of the city’s most iconic institutions: MGM Resorts. The audacious hack, which unfolded over six intense days, sent shockwaves through corporate America and put cybersecurity teams on high alert. Here’s an inside look at the cyberattack that defied the oldest rule in Vegas: The house always wins.
The Intrusion Begins
It all started innocently enough on a typical Friday night. A phone call to MGM Resorts’ tech support seemed routine—a forgetful employee locked out of their account, seeking a password reset. But the caller was no ordinary employee; they were a hacker. Within minutes, the real MGM employee received a notification that their password had been reset, but by then, the hackers were already inside.
The Ultimate Game
Over the next five days, this brash group of cybercriminals attempted to siphon more than $30 million from MGM. For them, it was the ultimate game—a chance to defy the odds and rewrite the rules. But MGM fought back, throwing its hotels and casinos into disarray. The hack wasn’t just about money; it was a statement—a warning to corporate America that no fortress is impenetrable.
Scattered Spider Strikes
The hackers behind this audacious attack are part of a small but prolific cybercrime clique known as “Scattered Spider.” Unlike many other groups, these elusive individuals are native English speakers, a rarity in the world of cybercrime. Their entry points are surprisingly low-tech: phone calls and online chats with tech support. They excel at social engineering, fooling people into divulging critical information that allows them to infiltrate victim companies.
The Aftermath
MGM Resorts, which operates popular Las Vegas properties like the Bellagio, Aria, and Mandalay Bay, scrambled to recover. Casino floors shut down, hotel guests couldn’t access their rooms, and corporate emails remained inaccessible. The breach cost MGM over $100 million, a staggering price for a few days of chaos. The world now knows that these young hackers are on the prowl, capable of disrupting even the most vigilant industries.
