The MGM hack brought chaos to Las Vegas: six days inside the cyberattack that put corporate America on notice

Sunday, March 31, 2024 5:25 PM
  • United States
  • Nevada
  • Robert McMillan and Katherine Sayre, The Wall Street Journal

The break-in began on an otherwise typical Las Vegas Friday night.

Step one was a phone call to MGM Resorts’ tech support. The person on the line said they were an employee, but had forgotten their password and were locked out of their account. They gave some personal information over the phone. It all checked out.

What tech support didn’t realize was that the caller was a hacker.

A few minutes later, the real MGM employee received a notification that his password had been reset and reported this to the IT department. By then, it was too late. The hackers were in.