The personal information of 10.6 million guests who stayed at MGM Resorts hotels was hacked last summer.
The hack was first reported by ZDNet on Wednesday, which said the stolen information was posted to a hacking forum this week. Among the people who were impacted included celebrities like Justin Bieber and Twitter founder Jack Dorsey. ZDNet reported. The data exposed included names, address, and passport numbers for former guests.
MGM said it was “confident” no financial information had been exposed.
The resort chain said it was unable to say exactly how many people were impacted because information that was exposed might be duplicated.
MGM said most of the data that was stole was “phonebook information” like names, telephone numbers and email addresses, which are already publicly available.
But approximately 1,300 former guests were notified that more sensitive information including passport numbers had been revealed.
A further 52,000 customers were told that less sensitive personal information was exposed. This was only a portion of those impacted.
MGM said its notification to customers followed state laws. Most US states do not require companies to tell customers if data which is already public has been exposed during a hack.
MGM has resorts in Las Vegas, Atlantic City and Detroit in the US. It also has property in China and Japan and is developing a new resort in Dubai.
