Teen Suspect Surrenders in 2023 Las Vegas Casino Cyberattack Case

A teenage boy suspected of involvement in the 2023 cyberattacks that disrupted the two largest Las Vegas casino companies has surrendered to authorities, according to the Las Vegas Metropolitan Police Department (LVMPD).

MGM hack
In 2023, hackers used vishing (voice phishing) to impersonate employees and gain access to the internal systems of MGM Resorts International and Caesars Entertainment on the Las Vegas Strip, causing hundreds of millions of dollars in financial losses. (Image: Shutterstock)

 

The suspect, whose name has not been released due to his status as a minor, is currently being held at the Clark County Juvenile Detention Center.

He faces six felony charges:

  1. Three counts of obtaining and using personal identifying information to harm or impersonate another person
  2. One count of extortion
  3. One count of conspiracy to commit extortion
  4. One count of unlawful acts regarding computers

According to police, prosecutors from the Clark County District Attorney’s Office seek to transfer his case to the criminal division, where he would face the charges as an adult.

The arrest stems from a broader investigation led by the FBI’s Las Vegas Cyber Task Force, which includes LVMPD cyber investigators. In November 2024, federal prosecutors indicted four men, aged 20 to 23, in connection with similar cyber attacks, though those charges were not formally linked to the MGM and Caesars incidents.

LVMPD’s latest statement did not name MGM Resorts International or Caesars Entertainment directly, instead referring to “multiple Las Vegas casino properties” targeted between August and October 2023.

Cybersecurity experts have attributed the attacks to a loosely organized hacker group known as Scattered Spider, which also operates under aliases such as Octo Tempest, UNC3944 and 0ktapus3.

MGM reportedly refused to pay a ransom, resulting in an estimated $100 million in losses and roughly 10 days of system outages affecting reservations, slot machines, room keys and websites. Caesars, in contrast, was reported by the Wall street Journal to have paid $15 million of a $30 million ransom demand and experienced less operational disruption.

 

 

Corey Levitan joined Casino.org in 2022 after a long career covering Las Vegas. He currently covers entertainment, dining and gaming news in Las Vegas.

Corey spent six years covering the Vegas Strip for the Las Vegas Review-Journal, where he also wrote the most popular humor column in the city’s history. (For “Fear and Loafing,” he tried out 176 Vegas jobs, including poker player, blackjack dealer and Follie Bergere dancer.)

Corey has won more than 100 local, state and national awards for his journalism, which has also appeared in Rolling Stone, New York Magazine and the New York Post.

Corey is a New York native whose hobbies include playing guitar, trying to be a better husband, and arguing with strangers on Facebook.

Contact Corey at corey@casino.org.

Comments icon

Conversation (0)

+ Add a comment

Be the first to comment on this article.

Write a comment

Your email address will not be published.