On June 18, 2025, Judge Gloria M. Navarro granted final approval of a $45 million class action data breach settlement with MGM International Resorts. Gibbs Mura partner David Berger served as Interim Class Counsel and was integral to negotiating the settlement. The litigation was on behalf of tens of millions customers who alleged that their personal data was exposed after MGM failed to take reasonable security efforts to protect it from two data breaches in 2019 and 2023
What was the MGM Data Breach Lawsuit About
This class action lawsuit was originally filed in 2019 and alleged that over 37 million MGM guests’ personal data, including social security numbers and passport numbers, were negligently exposed in a data breach. Forbes reported that the personal data of millions of guests who stayed at MGM hotels was published on a hacking forum in February 2020, including the data of holiday travelers as well as personal data for celebrities, reporters, and U.S. military and government officials.
Four years later, in September 2023, MGM suffered another data breach. Reports suggest that breach was carried out by the same hacking group behind the 2019 MGM cyberattack.
Gibbs Mura played an instrumental role in steering this lawsuit successfully through a motion to dismiss and significant discovery, and ultimately helping to secure a $45 million settlement addressing both the 2019 and related 2023 data breaches.
Tayler works with employees and consumers in mass arbitrations and mass torts to combat unfair business practices by corporations.
Gibbs Mura’s Data Breach Litigation Experience
David Berger has litigated some of the largest data privacy class actions in the country, recovering over $1 billion for clients in nearly 20 years of practice. He has held corporations accountable when they fail to protect personal data or profit from misusing it, including in litigation against Equifax, Anthem, Vizio, Adobe, Banner Health, and Excellus BlueCross BlueShield.
Gibbs Mura attorneys have received numerous honors for their, including “Top Plaintiff Lawyers in California,” “Top Cybersecurity/ Privacy Attorneys Under 40,” and “Cybersecurity and Privacy MVP.”
Our data breach and privacy lawyers also currently serve in court-appointed leadership positions in the Change Healthcare Data Breach Lawsuit, the Tempus AI (Ambry Genetics) Data Privacy Lawsuit, and the Prosper Data Breach Lawsuit.
