【Risa Sakamoto Archives】

Victims of a massive 2023 data breach of MGM Resorts databases can Risa Sakamoto Archivesnow claim their (albeit small) payouts after a year of litigation and a $45 million settlement.

On Sept. 9, 2023 — in what would become one of the biggest data breaches to hit the hospitality industry — hackers were able to manipulate an MGM IT employee into providing them access to internal systems. The hackers, part of the ALPHAHV/Black Cat ransomware group, then took control of the company's computer networks and demanded ransom, which MGM refused to comply with. The event lasted nine days, during which customers were locked out of their rooms, and slot machines, ATMs and check in systems went down. The ransomware attack reportedly affected 30 properties and 37 million customers, although the number could be higher.

Class action lawsuits followed, pairing the 2023 attack with a similar July 2019 breach in which an unspecified amount of personal information was stolen and posted to the Dark Web. The $45 million lawsuit was settled in January, with a final hearing scheduled for June 18.

How can I claim my class action payout?

MGM sent letters to individuals who were confirmed victims last year — those individuals should expect to receive an email in the coming weeks with a personalized ID and PIN used to file their claims, if they haven't been alerted already. But you may still be eligible to apply if you stayed at an MGM property before the data breaches and believe your information was affected.

Customers who can prove the breach resulted in substantial financial losses have the opportunity to file claims up to $15,000. But most claimants will receive between $20 to $75, depending on the type of personal data that was breached. Those whose Social Security numbers or military identification numbers were stolen can file for $75 payouts, while customers whose passport number or driver’s license were exposed can claim $50. Individuals who had names, addresses, or birthdates breached can only receive $20.

• Grubhub confirms data breach, both drivers and customers are affected
• Cybersecurity group sues DOGE over data access
• Social Security data breach: 7 steps to take if you're affected, according to the Social Security Administration
• Apple to pay $95 million settlement for Siri listening to your private conversations

Claims must be filed before June 3.Settlement class members are also eligible for a year of free identity theft protection and credit monitoring.