REPORT (News 3): GOTCHA! | Las Vegas Casinos Targeted by Cyberattacks | Teen Suspect SurrendersBetween August and October 2023, several Las Vegas casino properties fell victim to sophisticated cyberattacks attributed to an organized group known by various names, including “Scattered Spider,” “Octo Tempest,” “UNC3944,” and “0ktapus.”The Federal Bureau of Investigation’s Las Vegas Cyber Task Force, which includes the Las Vegas Metropolitan Police Department’s Cyber Investigative Group, took charge of the investigation due to the complexity of the crime.Detectives identified a teenage male as a suspect in the case.

Teenage Suspect Surrenders in 2023 Las Vegas Casino Cyberattacks: Breaking Development in Scattered Spider Case

In a significant breakthrough, a teenage suspect has turned himself in to authorities regarding the devastating 2023 cyberattacks that crippled major Las Vegas casino operations, marking a crucial milestone in the ongoing federal investigation. The following is according to published media accounts:

Arrest Details: Teen Faces Adult Charges

On September 17, 2025, the juvenile suspect surrendered to the Clark County Juvenile Detention Center, where he was booked on multiple serious charges including obtaining and using personal identifying information, extortion, conspiracy to commit extortion, and unlawful computer acts. The Clark County District Attorney’s Office is reportedly seeking to transfer the case to criminal court, where the teenager would face these charges as an adult.

The 2023 Las Vegas Casino Attacks: A $100 Million Disaster

MGM Resorts Hit Hard

Between August and October 2023, sophisticated cyberattacks targeted several major Las Vegas casino properties, with MGM Resorts suffering the most devastating impact. The attacks reportedly resulted in:

• Slot machines going offline with error messages displayed
• Hotel room keys failing to work, stranding guests
• Check-in delays of up to six hours
• ATM and electronic payment system failures
• Restaurant reservation disruptions
• Mobile app complete inaccessibility

MGM Resorts reported a staggering $100 million loss to its third-quarter 2023 results due to the cyberattack, with operations disrupted for approximately 10 days.

Caesars Entertainment: $15 Million Ransom Payment

Caesars Entertainment reportedly took a different approach, reportedly paying approximately $15 million in ransom to the attackers – half of their original $30 million demand. This payment was intended to prevent the release of sensitive guest data from their rewards database.

The Scattered Spider Cybercrime Group

The attacks were attributed to an organized cybercrime group known by multiple aliases:

• Scattered Spider
• Octo Tempest
• UNC3944
• 0ktapus

This group is reportedly believed to be affiliated with the larger ALPHV ransomware organization.

Social Engineering Attack Methods

The cybercriminals employed sophisticated social engineering tactics to breach casino security:

1. LinkedIn reconnaissance – Hackers identified MGM employees on LinkedIn
2. Identity impersonation – Attackers called IT help desk staff pretending to be legitimate employees
3. Credential theft – Obtained system access through fraudulent password and MFA changes
4. Privilege escalation – Gained administrator rights within the casino networks

The initial breach reportedly took only 10 minutes to execute.

FBI Investigation and Previous Arrests

The Federal Bureau of Investigation’s Las Vegas Cyber Task Force, including the Las Vegas Metropolitan Police Department’s Cyber Investigative Group, reportedly leads the complex investigation. This latest arrest follows previous developments:

• July 2024: 17-year-old from the United Kingdom reportedly arrested for computer misuse
• November 2024: Federal charges reportedly filed against five individuals connected to Scattered Spider
• September 2025: Latest teenage suspect reportedly surrenders

Industry Impact and Cybersecurity Lessons

The 2023 Las Vegas casino attacks serve as a critical warning for the hospitality and gaming industries. Key takeaways include:

Enhanced Employee Training

Regular cybersecurity awareness programs focusing on social engineering recognition and proper verification procedures.

Robust Authentication Systems

Implementation of stronger identity verification protocols at IT help desks to prevent impersonation attacks.

Incident Response Planning

Development of comprehensive response strategies to minimize operational disruption during cyberattacks.

Ongoing Investigation

The investigation remains active, with authorities encouraging anyone with additional information to contact the LVMPD Cyber Investigative Group. The case highlights the growing sophistication of cybercriminal organizations and the significant financial and operational risks facing major hospitality companies.

The surrender of this teenage suspect represents a significant step forward in holding accountable those responsible for one of the most disruptive cyberattacks in Las Vegas history, demonstrating that cybercriminals – regardless of age – will face serious consequences for their actions.

Sources:
[1] MGM Resorts: How hackers hit jackpot with service desk attack
[2] An Overview of the MGM Cyber Attack – Netwrix Blog
[3] What Everyone Got Wrong About the MGM Hack – 1Password Blog
[4] MGM Resorts and Caesars Palace Cyber Attacks Explained
[5] What You Can Learn from the 2023 MGM Las Vegas Cyber-Attack
[6] ALPHV: Hackers Reveal Details of MGM Cyber Attack
[7] The Top Cybersecurity Hacks in Casinos and Gaming – Asimily
[8] MGM RESORTS UPDATE ON RECENT CYBERSECURITY ISSUE
[9] Cyberattack cost MGM Resorts $100 million despite refusing to pay
[10] A Look Back at the MGM and Caesars Incident
[11] Las Vegas casinos targeted by cyberattacks; teenage suspect surrenders to authorities
[12] Police: Teen arrested in Las Vegas for involvement in 2023 MGM, Caesars cyberattacks
[13] Teen arrested in ‘sophisticated cyber crime’ attacks against Las Vegas casinos
[14] Arrest made in cyber-hacks that impacted Vegas resorts
[15] Scattered Spider – Wikipedia
[16] Las Vegas Casinos Targeted by Ransomware Attacks – LevelBlue