Teen arrested for allegedly orchestrating $100M cyber attack on Vegas Strip

A teenager suspected of masterminding a complex cyber attack targeting MGM Resorts in Las Vegas has been apprehended by local law enforcement authorities. The youngster, whose name has been withheld due to being a minor, is believed to have orchestrated a sophisticated digital intrusion that caused the renowned hotel chain losses amounting to a staggering $100 million.

The incident, which unfolded between August and October of 2023, involved a group of cybercriminals known by the moniker “Scattered Spider” surreptitiously infiltrating the computer systems of various prominent casinos along the iconic Vegas Strip. Leveraging a remarkably simple strategy, one of the intruders purportedly posed as an MGM Grand employee by connecting with them on the professional networking platform LinkedIn. This individual then proceeded to deceive the company’s IT department, persuading them to initiate a password reset. With this crucial piece of information in hand, it allegedly took a mere 10 minutes for the hacker to gain unauthorized access to the internal networks of MGM.

The ramifications of the cyber breach were severe, causing widespread disruptions and financial distress for MGM. At several of its flagship properties, including the MGM Grand, Bellagio, Luxor, Excalibur, and the Cosmopolitan, critical operations were disrupted. Hotel key cards and slot machines were rendered inoperable, impeding guests’ ability to access their accommodations and indulge in gaming activities. Furthermore, employees found themselves locked out of their email accounts, exacerbating the chaos caused by the cyber attack.

Shortly after these events transpired, Caesars Entertainment, another prominent hospitality brand, was also targeted by cyber assailants. In response to the breach, the company scrambled to undertake remedial actions to safeguard its sensitive data. Nevertheless, the exact outcome of these efforts remains uncertain as reflected in Caesars’ cryptic statement indicating its attempts to ensure the erasure of stolen information by the perpetrators, albeit with no guarantees of success. Security experts have theorized that Caesars may have opted to negotiate with the hackers, although this remains unconfirmed.

Subsequent to the breaches, the Federal Bureau of Investigation (FBI) assumed control over the investigative proceedings to shed light on the cyber attacks. Through diligent efforts, law enforcement officials identified the teenage male as a primary suspect in the case. Voluntarily turning himself in to the Clark County Juvenile Detention Center on September 17, the individual now faces a litany of charges including extortion, theft, and unauthorized manipulation of computer systems. Authorities are pursuing legal action to have him tried as an adult, emphasizing the gravity of the offenses he is accused of committing.