A teenager is in custody, accused of participating in a sophisticated cyberattack that cost several Las Vegas casino properties hundreds of millions of dollars. This announcement was made by authorities late last week.
The Las Vegas Metropolitan Police Department detailed in a September 19 news release that the scheme unfolded between August and October 2023. The cyber intrusions are believed to have been orchestrated by an organized threat group known by various names including ‘Scattered Spider,’ ‘Octo Tempest,’ ‘UNC3944,’ and ‘Oktapus.’
Hackers targeted MGM Resorts, the operator of establishments like MGM Grand, the Cosmopolitan, Bellagio, Luxor, and Excalibur. Surprisingly, the hackers used a simple method. By impersonating an MGM Grand employee on LinkedIn, a hacker requested a password reset from the company’s IT Department. This gained them access to MGM’s internal systems in just about 10 minutes, according to SFGATE.
Following this breach, the hackers reportedly disabled slot machines, hotel key cards, blocked employee email access, and interrupted the hotel’s ability to book guests and manage reservations. An MGM Grand filing with the Securities and Exchange Commission noted losses of $100 million due to the ‘cybersecurity issue,’ which led to shutdowns at several MGM properties.
Coinciding with these events, Caesars Entertainment also reported a hack in an SEC filing. Hackers accessed sensitive customer data, including driver’s licenses and social security numbers of loyalty program members. Although the financial impact is unclear, Caesars indicated efforts to ensure the stolen data would be deleted, suggesting a ransom payment was involved, as hinted by cybersecurity experts noted in NBC News.
The FBI’s Cyber Task Force, alongside the LVMPD’s Cyber Investigative Group, took over the investigation. They identified a juvenile suspect, who later turned himself in at the Clark County Juvenile Detention Center on September 17. The suspect may face adult charges from the Clark County District Attorney’s Office, including extortion, identity theft for harm or impersonation, and unlawful computer acts.
The juvenile’s identity remains undisclosed due to his age.
Protecting Loved Ones from Bank Scams 
FCC Proposal on Phone Identity Checks Raises Privacy Concerns 
AI’s Role in Cybersecurity: A Strategic Perspective 
Minnesota Bans Crypto ATMs to Combat Scamming Activity 
AI Integration in U.S. Government: California’s Recent Developments 
AI Safety Report 2026 Highlights Emerging Risks and Challenges