MGM Resorts International reported a “cybersecurity issue” Monday that may have affected its hospitality, gaming and entertainment properties across the U.S.<\/p>\n
The issue may still be affecting the publicly traded company: Some of its websites were down late Monday, and it urged customers to book rooms and request reservations by phone.<\/p>\n
Its full impact on reservation systems and casino floors in Las Vegas, the company’s base, as well as at properties in Maryland, Massachusetts, Michigan, Mississippi, New Jersey, New York and Ohio, was unknown, spokesperson Brian Ahern said.<\/p>\n
In a statement Monday evening, the company said that the issue was ongoing but that its casino gaming floors were operational. “We continue to work diligently to resolve this issue,” it said.<\/p>\n
Earlier in the day, MGM resorts said that the matter affected “some of the company’s systems” and that law enforcement had been notified.<\/p>\n
Some MGM systems were shut down to protect data, and the company launched an internal investigation with the help of “leading external cybersecurity experts,” it said.<\/p>\n
The FBI in Las Vegas and the Nevada Gaming Control Board did not respond to requests for comment.<\/p>\n
MGM lists 19 properties in the U.S. They include some of the most popular resorts in Las Vegas, including the Bellagio, Mandalay Bay and the Cosmopolitan. It also has properties in China.<\/p>\n
Late last year Nevada’s gaming board approved stricter cybersecurity measures, including a three-day window to report any online system breaches.<\/p>\n
In July, the Securities and Exchange Commission adopted a similar rule for large, publicly traded companies. It requires a significant breach to be reported within four business days, but the requirement won’t be in effect until December.<\/p>\n