Teenager accused of orchestrating large-scale cyberattacks on casino; Caesars Resorts pays $15 million in ransom after extortion scheme

A teenager from Illinois is facing charges related to the cyberattacks on MGM and Caesars in 2023, the two largest resort operators in Las Vegas. The individual, who was 15 years old at the time of the incidents, recently appeared in court. Caesars chose to pay the alleged hackers $15 million to avoid further threats and extortion, while MGM refused to comply and incurred a loss of about $200 million, with more than 65,000 Social Security numbers compromised.

According to Clark County Chief Deputy District Attorney Summer Clarke, the accused teenager’s actions were both sophisticated and harmful, resulting in substantial financial losses and the theft of sensitive information. The FBI has been unsuccessful in recovering over $1.8 million worth of bitcoin connected to the cybercrimes. Clarke emphasized that the cyberterrorism executed by the teenager had far-reaching consequences, impacting not only Nevada but also other states and countries, all from the confines of his residence.

Despite the severity of the allegations, which span back two years, the teen was released from juvenile detention by Clark County District Court Judge Dee Butler. The judge took into consideration the teen’s family support and imposed stringent rules, including limited access to the internet and the banning of smartphones with internet capabilities. Defense attorneys David Chesnoff and Richard Schonfeld emphasized that the teenager had surrendered voluntarily, indicating that he was not a flight risk, and reiterated his positive standing within Nevada’s juvenile justice system.

During searches of the teen’s residence in late 2023 and early 2025, law enforcement officials discovered multiple laptops hidden throughout the house, highlighting the extent of his activities. The investigation connected the incidents to multiple locations, including Las Vegas, Illinois, New Jersey, and the United Kingdom. The media, under specified conditions, was allowed inside the courtroom during the proceedings, barring the disclosure of the identities of the teen and his parents, which was contested by the defense to no avail.

Tellingly, law enforcement apprehended the teen after he turned himself in at the Clark County Juvenile Detention Center. Subject to several charges, including personal identity theft and extortion, prosecutors are seeking to have him tried as an adult due to the severity of the offenses. The cyberattacks on various Las Vegas casino properties in late 2023 were attributed to a skilled hacking group known by various aliases, but the teenager now faces legal consequences for his involvement in these significant attacks.

The accused teen is scheduled to return to court in November, marking a developing saga of cybercrime with far-reaching implications.