Cybersecurity

MGM Resorts Hackers Broke In After Tricking IT Service Desk

  • Okta warned about hackers using similar techniques in August
  • Group suspected of attack is well known for social engineering
A cyberattack that disrupted MGM resorts and casinos across the country is believed to have began with a social engineering breach of the company’s information technology help desk.Photographer: Bridget Bennett/Bloomberg

The online attack that disrupted MGM Resorts International resorts and casinos across the country began with a social engineering breach of the company’s information technology help desk, according to a cybersecurity executive familiar with the investigation.

David Bradbury, chief security officer at the identity and access management company Okta, said his company issued a threat advisory in August about similar attacks against some of its customers, in which hackers used a low-tech social engineering tactics to gain entry and then more advanced methods that allow them to impersonate users on the networks.