Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details

MGM Resorts, a hotel and entertainment company headquartered in Las Vegas, United States, faced a data breach. On May 22, 2022, the Telegram Channel "Kingsman" posted a data package relating to this breach. The data dump was shared through four separate files. The data dump was also shared on BreachForums on May 20, 2022, by the threat actor "Calssara," who noted that the data dump is from July 2019. The same data leak was also shared on BreachForums on May 31, 2022, by the threat actor "beniaretz." The threat actor "beniaretz" from BreachForums noted that the data dump was initially stolen from the breach monitoring website DataViper via NightLion's online handle on July 14, 2020, and it which includes 8.7GB (142,479,938 records) with user information such as full name, date of birth, phone number and email address. From this package, ZeroFox extracted 24,836,265 email addresses. No passwords were found in this breach.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks