Caesars Palace casino lost data of US residents to extortionists

Carding 4 Carders

Professional
Messages
2,731
Reputation
13
Reaction score
1,375
Points
113
The hackers won a non-combustible amount in the form of Americans data and an incentive prize.

In a statement, Caesars Palace Casino in Las Vegas, owned by Caesars Entertainment, revealed details of a large-scale cyber attack that occurred in September. The personal data of more than 41,000 Maine residents was found to have been stolen by hackers.

The incident occurred as a result of a successful social engineering attack carried out against a third-party IT provider Caesars. Cybercriminals mainly gained access to the hotel chain's loyalty program.

Unauthorized access to the corporate network was obtained on August 18, 2023, and active data theft began on August 23. By September 7, the company came to the conclusion that among the stolen information were personal data of citizens, including customer names, driver's license numbers and/or passport numbers. It is noted that the financial information of clients remained unaffected.

Caesars response to the incident was prompt: the company claims that it took all necessary measures to ensure that the attackers deleted the stolen data, but, as Caesars notes, the company cannot guarantee this. According to unconfirmed reports, after the hack, Caesars agreed to pay the extortionists the required ransom in the amount of $15 million. In addition, affected customers are offered protection against personal information leakage, which will be valid for two years.

At the same time, another well – known casino and hotel chain, MGM Resorts, faced a similar attack from the same hacker group-Scattered Spider (UNC3944). Unlike Caesars, MGM management decided not to pay the ransom, citing the successful recovery of systems from backups.
 
Top