Teen suspected in massive cyberattack on Las Vegas casinos. Here’s what it cost
Summary
A 17-year-old is accused of participating in 2023 cyberattacks that hit two major Las Vegas casino operators. Authorities say Caesars Entertainment paid $15 million to settle a ransomware demand, while MGM Resorts suffered about $200 million in damages. Sensitive data — including Social Security numbers — was reportedly exposed. Investigators also contend roughly $1.8 million in bitcoin tied to the attacks remains unaccounted for. The teen surrendered to police in September and was released to his parents under restrictions as the case proceeds.
Key Points
- Caesars Entertainment reportedly paid $15 million to resolve a ransomware attack tied to the 2023 incident.
- MGM Resorts’ losses from the attack are estimated at about $200 million, affecting payment and other systems.
- Sensitive customer information, including Social Security numbers, was compromised during the breaches.
- Authorities suspect the teen still controls about $1.8 million in bitcoin connected to the attacks, though its location is unknown.
- The suspect, now 17, turned himself in and was released to his parents with court-imposed restrictions.
- Prosecutors described the attacks as “sophisticated,” underscoring growing cyber risk to hospitality and gaming infrastructure.
- FBI and other agencies continue to investigate; regulatory and legal fallout (including potential lawsuits) is ongoing.
Context and Relevance
The incident highlights how critical infrastructure in hospitality and gaming remains a prime target for ransomware and sophisticated cybercrime. Large payouts and hundreds of millions in operational damage show the financial and reputational stakes for operators. For customers, the breach underlines continuing risks to personal data and the limits of corporate defences. Regulators, insurers and operators are all watching closely — and may face pressure to tighten cybersecurity rules and disclosures.
Why should I read this?
Because it’s wild: a teenager is tied to attacks that cost operators tens to hundreds of millions and exposed people’s private data. If you work in cybersecurity, hospitality, payments or handle customer data, this is a handy snapshot of how costly and messy a single breach can get — plus the sort of legal and investigative ripple effects that follow.
Author style
Punchy and to the point: this isn’t just another data breach — it’s a headline-making, costly hit on major brands. Read the detail if you want the numbers and what they mean for the industry.
