Closed to new claimsData breachMGM Resorts $45 Million Data Breach Settlement: Payout Status
Last updated: July 25, 2026
The MGM Resorts data breach settlement is a $45 million agreement that resolves two separate cyberattacks — the 2019 data breach and the September 2023 ransomware attack — in a single fund. It is closed. The deadline to file a claim was June 3, 2025, and a federal judge granted final approval on June 18, 2025. If you filed a valid claim on time, your payment is being processed in the distribution phase; there is no way to file a new MGM claim in 2026.
The consolidated case, In re MGM Resorts International Data Breach Litigation, No. 2:20-cv-00376-GMN-NJK, was heard in the U.S. District Court for the District of Nevada before Judge Gloria M. Navarro. It combined the 2019-breach case (originally Smallman v. MGM Resorts International) with the 2023-attack case (Owens v. MGM Resorts International). Roughly 37 million people across both incidents were covered. Cash payments were tiered by how sensitive the exposed data was, plus reimbursement of up to $15,000 for documented losses and a year of free credit monitoring for every class member.
MGM Resorts International is one of the largest casino-and-hotel operators in the world, running properties such as the Bellagio, MGM Grand, Aria, and Mandalay Bay. The 2019 breach exposed personal details of about 10.6 million former hotel guests, which later appeared online. The September 2023 ransomware attack — attributed to the hacking groups Scattered Spider and ALPHV/BlackCat — disrupted MGM's operations for about nine days and exposed additional guest data. Both incidents were folded into this one $45 million settlement.
Key facts
- Settlement fund
- $45 million
- Breaches covered
- 2019 breach + Sept 2023 ransomware attack
- Tiered cash payout
- ~$75 / ~$50 / ~$20 by data exposed
- Documented-loss reimbursement
- Up to $15,000
- Class size
- ~37 million people
- Claim deadline
- June 3, 2025 (closed)
- Final approval
- June 18, 2025
- Case
- In re MGM Resorts Data Breach Litig., 2:20-cv-00376 (D. Nev.)
Official settlement administrator: mgmdatasettlement.com (official administrator)
Who qualifies
- You received a data breach notice from MGM Resorts about the 2019 breach and/or the September 2023 ransomware attack — this notice was the key to being a class member.
- The settlement covered roughly 37 million people whose personal information was exposed in either incident, including names, addresses, phone numbers, email addresses, and dates of birth, and for some people driver's license, military ID, passport, or Social Security numbers.
- Cash payments were tiered: about $75 if a Social Security or military ID number was exposed, about $50 for a passport or driver's license number, and about $20 for name, address, and date of birth — all subject to pro-rata adjustment.
- You had to file a valid claim before the June 3, 2025 deadline. The claim window is closed and no new claims are accepted.
MGM settlement payout status — what happens now
- 1
The claim window closed in June 2025
The deadline to file was June 3, 2025. If you got an MGM breach notice but did not file by then, you are not entitled to a payment. There is no way to submit a new MGM data breach claim in 2026 — the settlement is closed.
- 2
The court approved the $45 million settlement
Judge Gloria M. Navarro granted final approval on June 18, 2025 in the District of Nevada, finding the $45 million non-reversionary fund fair, reasonable, and adequate. The single fund resolves both the 2019 breach and the 2023 ransomware attack.
- 3
Payments are tiered by the data that was exposed
Valid claimants receive about $75 (Social Security or military ID exposed), $50 (passport or driver's license), or $20 (name, address, date of birth), plus up to $15,000 for documented losses fairly traceable to the breaches. Every class member could also elect a year of free three-bureau credit monitoring. Cash amounts are estimates subject to pro-rata adjustment based on total claims.
- 4
Use only the official administrator
Payments and any check-reissue questions go through the official settlement administrator at mgmdatasettlement.com (1-888-899-8358). Any site or caller asking for a fee or your full Social Security number to "release" an MGM payment is not legitimate.
- 5
Catch the next breach settlement — ClaimBee alerts you
Major data breach settlements open and close constantly, and the notice letters are easy to miss. ClaimBee scans 2,000+ cases, matches breaches to your profile, and tracks every deadline so you file the next one before it closes.
Missed this one? Don't miss the next.
ClaimBee matches your profile against 2,000+ active settlements, shows payout and proof requirements up front, and tracks every deadline for you.
Frequently asked questions
Can I still file a claim in the MGM data breach settlement?
No. The claim deadline was June 3, 2025 and the court granted final approval on June 18, 2025. The settlement is closed and in the payout phase, so no new MGM claims are accepted in 2026.
How much is the MGM settlement payout per person?
Cash payments are tiered by the data exposed: about $75 if your Social Security or military ID number was involved, about $50 for a passport or driver's license number, and about $20 for name, address, and date of birth. You could also claim up to $15,000 for documented losses. All cash amounts are subject to pro-rata adjustment.
Which MGM breach does this settlement cover — 2019 or 2023?
Both. The single $45 million fund resolves the 2019 data breach (about 10.6 million former hotel guests) and the September 2023 ransomware attack together, in the consolidated case In re MGM Resorts International Data Breach Litigation in the District of Nevada.
Who was eligible for the MGM settlement?
People who received a data breach notice from MGM Resorts about the 2019 breach and/or the 2023 ransomware attack — roughly 37 million people whose personal information was exposed in either incident.
When will I get my MGM settlement check?
If you filed a valid claim before the June 3, 2025 deadline, your payment is processed in the distribution phase that began after the June 18, 2025 final approval. Timing depends on appeals and administration; check status through the official administrator at mgmdatasettlement.com.
Is the MGM data breach settlement legit?
Yes. It is a real, court-approved settlement in the U.S. District Court for the District of Nevada, administered at mgmdatasettlement.com. The genuine settlement never charged a fee to file and never asked for a full Social Security number to release a payment. The claim window, however, is closed.
Related settlements
Closed · Data breach
Marriott / Starwood Data Breach Settlement
No consumer payout · No consumer claim
Closed · Data breach
Home Depot Data Breach Settlement
Up to $10,000 with proof + free monitoring · Closed Oct 29, 2016
Closed · Data breach
T-Mobile $350 Million Data Breach Settlement
$25 flat ($100 CA) / up to $25,000 · Closed Jan 23, 2023
More settlements people are checking
Payout status for other settlements we track, updated as administrators publish new information.