October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
The Finance Base
The Money Desk · Blog
Re:

MGM, Caesars Face Regulatory and Legal Maze After 2023 Cyber Incidents

MGM and Caesars faced different legal and regulatory consequences after their 2023 cyber incidents. MGM’s approved $45 million settlement resolved claims without a merits finding, while Caesars disclosed ongoing lawsuits and state-regulator inquiries.
From TheFinanceBase Team5 min to read

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

MGM Resorts and Caesars Entertainment experienced different fallout after their 2023 cyber incidents. MGM reported visible disruption to reservations and casino-floor systems and later reached a $45 million private settlement covering its 2019 and 2023 data incidents. Caesars said its casino and online operations continued, but disclosed loyalty-data exposure, putative class actions and inquiries from multiple state regulators. Neither company’s public record described here establishes a court finding that it violated the law.

The two incidents produced different business impacts

Caesars’ 2025 Form 10-K describes a social-engineering attack aimed at an outsourced information-technology support vendor. The unauthorized actor accessed the company network and obtained a copy of its loyalty database. Caesars said the database contained driver’s-license and/or Social Security numbers for a significant number of members, and that it could not assure that the intruder had deleted the data.

Caesars reported that the incident did not affect customer-facing operations and that it did not believe the event materially affected its business. It also said affected loyalty members were offered credit monitoring and identity-theft protection.

MGM’s 2023 incident had a more visible operational effect. Contemporary reporting described interruptions involving reservations and casino-floor systems, while Caesars reported that its casino and online operations continued without disruption. Operational disruption alone does not determine whether either company was legally responsible for a security failure.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall

How MGM’s customer litigation ended

The $45 million settlement

The MGM Data Incident Litigation settlement administrator says the $45 million agreement covers two incidents: MGM’s July 2019 incident and the September 2023 incident. The court granted final approval at a hearing on June 18, 2025.

The payment is a private class-action settlement, not a regulatory fine. MGM denied the claims. The settlement administrator’s FAQ states that no court or other judicial entity determined that MGM committed wrongdoing or violated a law. The cases did not go to trial, so the approval resolved the litigation without a merits judgment.

What happened procedurally before approval

A New Jersey federal court order described claims for negligence, breach of contract and unjust enrichment and transferred the matter toward Nevada, where similar MGM actions were pending. A Nevada order records consolidation of 16 related putative class actions. Those orders addressed venue and case management; they did not decide whether the allegations were true.

Can a claimant still file?

No. The settlement administrator lists June 3, 2025 as the claim deadline, which has passed. Anyone checking a payment, exclusion or other individual right should use the official settlement documents or consult a qualified lawyer rather than rely on individualized advice from a general article.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What regulators did—and did not—establish

Federal Trade Commission compulsory process described by MGM

In a petition filed February 20, 2024, MGM said FTC staff issued a Civil Investigative Demand on January 25, 2024 and served it on January 29. MGM asked the court to limit or quash the demand. A Civil Investigative Demand is compulsory investigative process; MGM’s filing is not an FTC conclusion that the company violated a law, and the filing itself does not establish what the agency ultimately decided.

Nevada Gaming Control Board docket entries

The Nevada Gaming Control Board’s public complaints, stipulations and orders docket lists an April 17, 2025 disposition involving MGM Resorts International and related MGM entities. It also lists a November 20, 2025 disposition involving Caesars Entertainment, Inc. and Caesars Palace.

The docket confirms that those matters reached recorded dispositions, but the readable listing does not establish the monetary terms or any corrective obligations in the underlying stipulations. It would be inaccurate to infer a fine, admission or required remediation without the actual documents.

Caesars’ state-regulator inquiries

Caesars’ 2025 Form 10-K says numerous state regulators made inquiries about the incident. Caesars said it was responding and cooperating. The filing did not estimate potential losses at that stage and reported no material impact based on the company’s assessment. An inquiry or cooperation statement is not, by itself, a finding of liability.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

MGM and Caesars: the legal posture side by side

Issue MGM Resorts Caesars Entertainment
Incident information publicly described The reviewed materials emphasize the 2023 operational disruption; they do not provide equivalent incident-pathway and data-detail descriptions. Caesars described social engineering of an outsourced IT-support vendor and access to loyalty data containing driver’s-license and/or Social Security numbers for a significant number of members.
Reported operational effect Reservations and casino-floor systems were disrupted, according to contemporary reporting. Caesars said casino and online operations continued without customer-facing disruption.
Customer litigation Sixteen related putative class actions were consolidated; litigation covering the 2019 and 2023 incidents ended in an approved $45 million settlement. The 2025 Form 10-K reports numerous putative class actions alleging inadequate security and seeking damages and injunctive relief; the filing describes them as ongoing.
Regulatory process MGM’s filing describes an FTC Civil Investigative Demand. The Nevada docket lists an April 17, 2025 disposition involving MGM entities. Caesars reported inquiries from numerous state regulators. The Nevada docket lists a November 20, 2025 disposition involving Caesars entities.
What is legally established in the reviewed record The settlement was approved, but the administrator expressly says there was no judicial determination of wrongdoing or a legal violation. Caesars disclosed allegations and inquiries, but the reviewed filing does not report a liability judgment or quantify a loss.

Why a settlement is not the same as liability

A class settlement buys finality and distributes an agreed amount under court supervision. It can resolve claims even when the defendant denies wrongdoing and without a trial record deciding disputed facts. The MGM administrator’s no-finding language is therefore important: approval confirms the agreement met the legal standard for settlement, not that MGM was found liable.

The same distinction applies to agency activity. An FTC demand, a state-regulator inquiry or a gaming-board docket entry shows that an official process occurred. It does not prove that an agency found a violation, imposed a penalty or accepted a company’s account. Those outcomes require the applicable order, stipulation or final agency action.

What affected customers should do now

MGM claimants

  • The published MGM deadline was June 3, 2025, so new claims cannot be submitted through the ordinary settlement process.
  • For questions about an existing claim, exclusion, objection or payment, rely on the settlement administrator’s official documents and contact information.
  • For a dispute involving your own legal rights, obtain advice from a qualified attorney who can review the governing notices and deadlines.

Caesars loyalty members

  • If you received a notice from Caesars, follow the instructions in that notice for any credit-monitoring or identity-theft-protection benefit.
  • Use unique passwords and multi-factor authentication on accounts tied to loyalty-program information, and monitor credit reports and account statements for unfamiliar activity.
  • Keep the notice and any enrollment confirmation; they may be needed to establish eligibility or obtain support.

What remains unresolved

The public materials establish that both companies faced litigation and regulatory attention, but they do not establish identical legal outcomes. MGM has an approved settlement with no merits finding, an FTC process described in MGM’s own petition and a Nevada docket disposition whose detailed terms require the underlying stipulation. Caesars has disclosed ongoing class-action allegations, state-regulator inquiries, a Nevada docket disposition and its own assessment that the incident was not materially harmful to the business. The exact penalties or corrective obligations in either Nevada matter should not be reported until the official stipulation or order is reviewed.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More post from the Money Desk

  1. The Money DeskBlogTheFinanceBase07 MAR 2625 minWhat Is a 457 Plan?
  2. The Money DeskBlogTheFinanceBase07 MAR 2621 minTime Value of Money: What It Is and How It Works
  3. The Money DeskBlogTheFinanceBase07 MAR 2627 minAre You Living in One of These Top 10 Most Expensive Cities to Retire?
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.