In its Q2 2026 earnings call, MGM Resorts announced that it saw a slight 1% year-on-year increase in quarterly revenue, reaching $4.5 billion, with the company in talks of a...
MGM Resorts and the U.S. Federal Trade Commission (FTC) are close to settling a deal over the investigation into the company’s 2023 cyberattack that disrupted MGM’s operations for days and exposed customer data.
After the cyber attack, the FTC started an investigation to determine whether MGM had the necessary security measures in place to protect sensitive customer information. The main question was to understand whether the attack took place as a result of a consumer protection law violation from MGM’s side.
Now, both sides are nearing an agreement to resolve the matter. While the exact terms are not shared with the public yet, the resolution in similar cases often includes financial penalties and commitments to improve data security practices.
MGM has not commented on the potential resolution, but the company previously stated that it had taken steps to strengthen its cybersecurity systems following the attack.
For the FTC, this case highlights the need to increase scrutiny on companies that handle large amounts of consumer data. Businesses in hospitality and gaming, which rely on digital systems, are particularly vulnerable to cyber threats. As cyberattacks become more and more common, companies must integrate stronger services in order to protect both their operations and customer trust.
