Long-Lasting MGM Resorts Cyberattack and Outage Continues to Affect Services on Day Three

MGM Resorts has filed a report with the U.S. Securities and Exchange Commission (SEC) detailing the ongoing “cybersecurity issue” that forced the company to shut down several critical systems. The problem persists three days after its initial disclosure.

In the SEC filing, MGM continues to refer to the incident as a “cybersecurity issue.”

Currently, MGM’s corporate email, restaurant reservation, and hotel booking systems are offline, including its digital room keys. Instead of providing a list of phone numbers for its properties, the company now directs customers to Live Nation’s Ticketmaster or AXS for event tickets.

Credit agency Moody’s has issued a warning, stating that the cyber incident exposes significant risks within MGM and could potentially impact the company’s credit rating. MGM declined to comment on Moody’s warning.

Since Monday’s announcement, MGM’s stock price has dropped over 6%, in contrast to the modest gain in the S&P 500 during the same period.

The FBI is closely monitoring the situation, while the SEC’s new cyber disclosure rules, which would require more information from MGM, will not come into effect until the end of the year.

Customers have taken to social media platforms to express frustration with the extent and duration of the outage, including issues with hotel key cards and concerns about personal data security. MGM previously suffered a hack in 2020, where the personal information of over 10 million customers was compromised.

MGM is using noncorporate, commercially available email addresses to communicate with the press. Apart from a brief update confirming the restoration of gaming floors, the company has provided minimal additional information.

CNBC’s request for comment from the SEC has not received an immediate response.