Teenage Hacking Suspect Arrested in Connection with Las Vegas Cyberattacks

^{MGM and Caesars Entertainment casinos on the Las Vegas Strip were among properties hit by 2023 cyberattacks, which cost the companies over $100 million in damages. (Photo: Eye35 / Alamy)}

The Las Vegas Metropolitan Police Department (LVMPD) announced that it has arrested a teenage boy accused of crimes related to the 2023 cyberattacks that targeted Las Vegas casinos operated by MGM Resorts International and Caesars Entertainment.

Officials said that the suspect, who surrendered to authorities on Sept. 17, was identified by the FBI Las Vegas Cyber Task Force.

Cyberattack Investigation Has Led to Several Arrests

In September 2023, a hack targeting the systems of MGM Resorts International brought operations at its casinos in the U.S. to a standstill, with its Las Vegas properties feeling the brunt of the effects. The attack forced MGM to switch to manually checking in customers, while slot machines, ATMs, and room keys all malfunctioned. Online booking systems also went down, leaving customers unable to access services remotely.

After the attack, hacking group Scattered Spider claimed responsibility. MGM ultimately reported $100 million in damages, while Caesars ultimately chose to pay a $15 million ransom to the hackers, roughly half of what attackers demanded.

Despite the decentralized nature of groups like Scattered Spider, authorities have made some progress on charging individuals believed to be a part of the casino attacks. In January 2024, law enforcement officials arrested 19-year-old Noah Michael Urban in Florida. That was followed by the 2024 arrests of UK national Tyler Buchanan in Spain in June, and a 17-year-old from England being arrested in July. 

The most recent arrest didn’t directly reference the companies targeted by the attack, but a release by the LVMPD did mention “multiple Las Vegas casino properties” that were attacked between August 2023 and October 2023. 

According to LVMPD officials, the suspect is charged with three counts of Obtaining and Using Personal Identifying Information of Another Person to Harm or Impersonate Person, one count of Extortion, one count of Conspiracy to Commit Extortion, and one count of Unlawful Acts Regarding Computers.

“The Clark County District Attorney’s Office is seeking to transfer the juvenile to the criminal division, where he would face these charges as an adult,” the press release said.

Casinos Still Battling Digital Threats

The arrest comes at a time when the casino industry continues to grapple with cyberattacks and social engineering schemes that continue to cost venues time and money. Since 60 Minutes did a report on the issue in April 2024, more casinos nationwide have found it increasingly difficult to deal with hackers.

In February 2025, five Kewadin Casinos in Michigan’s Upper Peninsula shut down temporarily due to a cybersecurity incident. More recently, Olympia Gaming was targeted by a cyberattack on June 19, which impacted both of its Nevada casino properties.

Nevada's state systems have also dealt with digital threats beyond its casinos, too. A cyberattack in August forced Nevada officials to take down a number of online systems to contain the damage. The last update on Sept. 12 regarding that incident suggested that about 90% of state public-facing websites were operational again.

“This kind of recovery is never easy,” Nevada Governor Joe Lombardo said at that time. “But I want Nevadans to know we are making real headway, and every day brings us closer to full restoration.”