Las Vegas Authorities Charge Juvenile in 2023 MGM & Caesars Hacks

A juvenile has been arrested in connection with a cyberattack that impacted multiple Las Vegas Strip casinos and resulted in estimated losses of ~$100 million, according to law enforcement and public filings. The suspect was taken into custody by local authorities on September 17.

The cybercrime, attributed to an organized group known by names including Scattered Spider, Octo Tempest, UNC3944, and 0ktapus, reportedly unfolded between August and October 2023. The attacks disrupted hotel key card systems, slot machines, booking reservations, and employee email systems at MGM Resorts.

Caesars Entertainment was also affected; the company said its loyalty program database, including sensitive data, was accessed via social engineering through an outsourced IT vendor.

The teen is being charged with multiple counts, such as unlawful acts involving computers, extortion, impersonation and conspiracy. Prosecutors may try the juvenile in adult court.