Press Releases

$45M Global Settlement in MGM Data Breach Class Action Preliminarily Approved

Cohen Milstein

January 24, 2025

LAS VEGAS – A federal court granted preliminary approval of a $45 million global settlement in a data breach class action against MGM Resorts International for failing to implement reasonable data security practices, thereby allowing the personal information of tens-of-millions of MGM hotel guests and customers to be stolen in two massive data breaches in July 2019 and September 2023.

Plaintiffs alleged that because MGM Resorts failed to implement reasonable data security practices, MGM customers’ personally identifiable information (PII), including addresses, driver’s license numbers, social security numbers, passport numbers, phone numbers, email addresses, dates of birth, and other information, were stolen as a result of the two data breaches. Some of the information was subsequently posted for sale on online forums.

“On behalf of millions of MGM Resort customers, I’m very pleased with this settlement,” said Douglas J. McNamara, Co-Lead Interim Class Counsel and a partner at Cohen Milstein. “The hotel and entertainment industries are particularly desirable targets for hackers. The same hackers also attacked Caesars Entertainment, Inc. in 2023.” Mr. McNamara is Interim Co-Lead Class Counsel in In Re: Data Breach Security Litigation Against Caesars Entertainment, Inc., as well.

The settlement includes significant financial relief for impacted plaintiffs. Class members whose social security number or military identification number were exposed are eligible for a $75 cash payment and those whose passport number or driver’s license were exposed are eligible for a $50 payment. In addition, all settlement class members may elect identity theft protection and credit monitoring.

MGM Resorts International is a global hospitality, entertainment, and resort company, which operates properties across the U.S., including the Bellagio, Mandalay Bay and MGM Grand. The name of the consolidated class action is In re MGM Resorts International Data Breach Litigation, Case. No. 2:20-cv-00376, U.S. District Court, District of Nevada.

In addition to Douglas J. McNamara of Cohen Milstein, the Interim Class Counsel leadership team for the 2019 case includes John A. Yanchunis of Morgan & Morgan; David M. Berger of Gibbs Law Group; and E. Michelle Drake of Berger Montague. The Interim Class Counsel leadership team for the 2023 case includes James J. Pizzirusso of Hausfeld; J. Gerard Stranch IV of Stranch, Jennings & Garvey; Lynn A. Toops of Cohen & Malad; Gary Klinger of Milberg; and Jeff Ostrow of Kopelowitz Ostrow.

###

About Cohen Milstein Sellers & Toll

Cohen Milstein Sellers & Toll PLLC, a premier U.S. plaintiffs’ law firm, with over 100 attorneys across eight offices, champions the causes of real people—workers, consumers, small business owners, investors, and whistleblowers—working to deliver corporate reforms and fair markets for the common good.