Overview

• The male juvenile turned himself in on Sept. 17 and was booked on extortion, conspiracy to commit extortion, unlawful acts regarding computers, and multiple identity‑theft counts, with the Clark County DA seeking to try him as an adult.
• The intrusions between August and October 2023 disrupted MGM properties by knocking out key cards, slot machines, bookings, and employee email, and MGM reported $100 million in lost revenue plus $10 million in one‑time response costs.
• Investigators say the attackers used LinkedIn to impersonate an MGM Grand employee, phoned IT for a password reset, and gained internal access in about 10 minutes.
• Caesars disclosed a separate breach that exposed loyalty members’ sensitive data and said it took steps to ensure stolen data was deleted; reports say the company paid a $15 million demand.
• Police and the FBI’s Cyber Task Force continue a wider probe tied to the Scattered Spider collective, with two UK teens arrested a day before the surrender and the DOJ attributing 47 U.S. extortion attacks and at least $115 million in ransom to the group.