MGM RESORTS · CUSTOMER DATA · DATA BREACH
MGM disclosed stolen customer identity information including driver's-license numbers and, for some customers, Social Security and passport numbers.
Customer records → breach → identity information outside custodian's control
MGM Resorts disclosed that its 2023 cybersecurity incident involved customer information including names, contact information, gender, dates of birth and driver's-license numbers. For a limited number of customers, Social Security and passport numbers were also affected.
Why it matters: A compelling reason to collect information is not the same thing as a guarantee that the information will remain under the collector's control forever.
Company disclosure: MGM Resorts — cybersecurity incident update
This page preserves the anecdote and its caveats separately from the shorter Why Privacy Matters explainer. The goal is to keep the argument readable without hiding the receipts.