MGM

Amazon completed its $8.5B MGM acquisition, but MGM’s 2023 coverage peak was driven by a disruptive casino cyberattack and its regulatory aftermath.

Who they are

Coverage uses MGM in two closely watched roles: as the entertainment business Amazon acquired to deepen its content offering, and as the casino operator affected by the September 2023 cyberattack. The stories therefore connect MGM to Amazon’s streaming and subscriber-retention strategy as well as to operational security failures in Las Vegas hospitality.

The recent arc

The coverage peak came in 2023Q3, when reporting focused on the MGM Resorts breach alongside the attack on Caesars. The Financial Times reported that Scattered Spider was likely behind the MGM hack and had used help-desk social engineering to obtain passwords; other accounts attributed responsibility to ALPHV/BlackCat or described Star Fraud’s role within the Com-linked ecosystem. MGM’s refusal to pay a ransom and its estimate of more than $100M in Q3 impact made the incident a business-disruption story, not simply a data-breach report.

In 2024, the story shifted from immediate disruption to accountability and attribution. MGM sued the FTC to halt its investigation into the 2023 attack and sought Chair Lina Khan’s recusal, while Wall Street Journal reporting traced the attack to Star Fraud and the broader online community also associated with Lapsus$. Coverage has since thinned; the latest item is an Amazon-related story rather than a new MGM operating development.

The tension

The central tension is between MGM’s exposure to social-engineering-led intrusion and the scrutiny that follows a major operational failure. Scattered Spider and related groups demonstrate how help-desk access can translate into disruption at a casino operator, while the FTC investigation puts MGM in conflict with the regulator over what data and oversight are warranted after the incident. The parallel Caesars breach reinforced that this was an industry-wide attack pattern rather than an isolated event.

Why it matters

MGM’s arc shows how a high-profile consumer and entertainment brand can become a test case for both cyber resilience and post-incident regulatory authority. If investigations and litigation continue to define the aftermath, the lasting significance may be less the attack’s initial attribution than whether regulators can examine companies’ security practices after disruptive breaches. Amazon’s ownership also keeps MGM relevant to a wider debate over whether premium content assets support Prime retention against services such as Netflix, though the recent corpus does not establish a new strategy or outcome.

Related: Amazon · FTC · Scattered Spider · Netflix · MGM was likely hacked by Scattered Spider, an English-speaking group t · Filing: Caesars confirms the casino operator was hacked via a social e