2019 MGM Resorts — 10.6M hotel guests
Data compromised
Names, addresses, phone numbers, emails, dates of birth
Technical writeup
MGM Resorts suffered a breach exposing personal data of 10.6 million former hotel guests. The data was posted for sale on a hacking forum and included names, addresses, phone numbers, emails, and dates of birth. The breach affected guests who had stayed at MGM properties.
Root cause
Unauthorized access; cloud misconfiguration