Tonya Owens, et al. v. MGM Resorts International et al.

If you received the Notice by email or postcard, you were identified as a Class Member in a class action settlement. A court authorized the Notice because you had the right to know about the Settlement and about all your rights and options before the Court decides whether to grant Final Approval of the Settlement. The email or postcard provided a summary of the Settlement as well as information on how to file a claim prior to the June 3, 2025, claim filing deadline. This website provides further details on the lawsuit, the Settlement, your legal rights, what benefits are available, who is eligible for the benefits, and how to get them.

The Honorable Gloria M. Navarro of the United States District Court for the District of Nevada is overseeing the combined Settlement of two class action lawsuits. The lawsuits are known as In re MGM International Resorts Data Breach Litigation, Case No.: 2:20-cv-00376-GMN-NJK and Tonya Owens, et al. v. MGM Resorts International, et al., Case No. 2:23-cv-01480-RFB ("lawsuits"). The individuals who filed these lawsuits are called the "Plaintiffs" and/or "Class Representatives" and the company being sued, MGM Resorts International, is called the "Defendant."

Plaintiffs filed these lawsuits against Defendant, individually, and on behalf of customers and guests of Defendant whose Private Information—including but not limited to, names, addresses, telephone numbers, email addresses, dates of birth, drivers’ license numbers, passport numbers, and Social Security numbers—was compromised as a result of two separate Data Incidents.

Plaintiffs allege that on or around July 2019, and again on or around September 2023, because of the Data Incidents, unauthorized individuals accessed Defendant’s network and their Private Information. Different Plaintiffs brought two separate lawsuits against Defendant arising out of each of the Data Incidents.

Defendant denies the legal claims in each lawsuit and denies any wrongdoing or liability. No court or other judicial entity has made any judgment or other determination of any wrongdoing by Defendant, or that any law has been violated. Instead, Plaintiffs and Defendant have agreed to a Settlement to avoid the risk, cost, and time of continuing the lawsuit.

In a class action, one or more people (called Class Representatives) sue on behalf of all people who have similar legal claims. Together, all these people are called a Class or Class Members. One court resolves the issues for all Settlement Class members, except for those Settlement Class members who timely exclude themselves (opt out) from the Settlement Class.

The Class Representatives in the lawsuits are the Plaintiffs who sued the Settlement Agreement.

Sometime after each lawsuit was filed, the Plaintiffs in the lawsuit in the 2019 Data Incident and the Plaintiffs in the lawsuit in the 2023 Data Incident decided to work together and collectively pursue a global settlement of both lawsuits with the Defendant. Plaintiffs and Defendant do not agree about the legal claims made in the lawsuits. Neither lawsuit has gone to trial, and the Court has not decided in favor of Plaintiffs or Defendant in either one. Instead, Plaintiffs and Defendant have agreed to settle the lawsuits together. The Class Representatives, Defendant, and their lawyers believe the Settlement is best for all Settlement Class Members because of the benefits to the Settlement Class Members and the desire to avoid the risks and uncertainty associated with continuing either of the lawsuits.

Who is Included in the Settlement?

The Settlement Class includes all persons in the United States whose Private Information was compromised because of the Data Incidents and who were sent notice by the Defendant of the Data Incidents.

Yes. Excluded from the Settlement Class are the judges presiding over the lawsuits and members of their direct families.

If you are still not sure whether you are a Settlement Class Member, you may consult the Important Documents page for more information.

The Settlement Benefits—What You Get if You Qualify

The deadline to submit a Claim Form was June 3, 2025. The Settlement provided the opportunity to file a claim for the following benefits:

Documented Loss Cash Payment: a cash payment relating to certain incurred financial losses related to the Data Incidents for up to $15,000.00. Losses must be related to the Data Incidents and must be accompanied by sufficient supporting documentation.

Tiered Cash Payment: a flat cash payment for certain Class Members if they had certain information exposed in either of the 2019 or 2023 Data Incidents. Each Class Member was sent email or mailed Notice informing them whether they were eligible for a Tiered Cash Payment, and if so, whether they fell into Tier 1, Tier 2 or Tier 3.

• Tier 1 Cash Payment – If your Social Security number or military identification number was exposed, you may be eligible to receive an estimated $75.00 flat cash payment.
• Tier 2 Cash Payment – If your passport number or driver’s license number was exposed, you may be eligible to receive an estimated $50.00 flat cash payment.
• Tier 3 Cash Payment – If your name, address, and/or date of birth was exposed, you may be eligible to receive an estimated $20.00 flat cash payment.

All Cash Payments may be subject to a pro rata (a legal term meaning equal share) increase from the Settlement Fund if the amount of Valid Claims is insufficient to exhaust the entire Settlement Fund. Similarly, in the event the amount of Valid Claims exhausts the amount of the Settlement Fund, the amount of Cash Payments may be reduced pro rata accordingly.

Financial Account Monitoring: one year of three-bureau identity theft protection, credit monitoring, and at least $1,000,000 of fraud/identity theft insurance.

Unless you opted out of the Settlement, you chose to remain in the Settlement Class. As the Settlement has received approval by the Court, all Court orders and any judgments will apply to you and legally bind you. You are not able to sue, continue to sue, or be part of any other lawsuit against the Released Parties about the legal issues in the lawsuits that are released by this Settlement. The specific rights you are giving up are called "Released Claims."

Section XIII of the Settlement Agreement describes the Released Claims and the Release, in necessary legal terminology, so please read these sections carefully. The complete Settlement Agreement is available here. For questions regarding the Release or Released Claims and what the language in the Settlement Agreement means, you can also contact Class Counsel listed in Question 15 for free, or you can talk to your own lawyer at your own expense.

How to Get Benefits from the Settlement

You must have submitted a timely and valid Claim Form for the Settlement Benefits described in Question 8.

The deadline to submit a Claim Form passed on June 3, 2025.

If you were sent Notice of the Settlement via email or mail, your Notice indicated whether you were eligible for a Tier 1, Tier 2, or Tier 3 Cash Payment. You were also provided with a Unique ID number to help you easily file your Claim online at the Settlement Website.

If you change your mailing address or email address after you submit a Claim Form, it is your responsibility to inform the Settlement Administrator of your updated information. You may notify the Settlement Administrator of any changes by writing to:

MGM Data Incident Litigation
Settlement Administrator
P.O. Box 3020
Portland, OR 97208-3020

Settlement Award Information

Payments for approved Cash Payment claims were sent out on December 12, 2025, via the payment method requested on the claim form. Financial Account Monitoring enrollment emails will be sent starting December 16, 2025.

Settlement payments will be provided to Class Members by check sent via USPS First-Class Mail or Digital Disbursements Payment such as Venmo, PayPal, Direct Deposit (ACH), or E-Mastercard. If you received a payment election email from Digital Disbursements (noreply@digitaldisbursements.com), you did not chose a specific digital payment method on your claim, but you can choose a digital payment method now and payment should be sent to you within 3 to 10 days.

If you require a reissue of your check payment, please provide the mailing address used to file your claim, along with your first and last name, and current address. The Settlement Administrator will verify that the information provided matches our records. Once verified, your previous payment will be voided, and the reissue will be processed and mailed to you. Please submit your request in writing to:

MGM Data Incident Litigation
Settlement Administrator
P.O. Box 3020
Portland, OR 97208-3020

If you received an email from noreply@digitaldisbursements.com, it is because you were determined to be eligible for a payment in a class action settlement administered by Epiq Class Action and Claims Administration (‘Epiq’). Epiq is the administrator for the settlement and Digital Disbursements is a payment partner Epiq Systems uses to facilitate digital payments. By default, individuals eligible for payments will receive an email containing a link to claim their payment. This is a legitimate email. If you claim a payment, you may also receive one or more follow-up emails from our payment partner, confirming where your payment is in the process. Follow-up emails from the payment entity you select (i.e., E-Mastercard, Venmo, etc.) are also possible. If you do not immediately claim your payment, you may also receive a reminder email.

Upon completing the payment selection process in the payment portal, your payment will be delivered to the payment destination you provided when making your selection.

E-Mastercard will generally be delivered to you via email anywhere from 1-10 days from when you confirm your selection.

Venmo, and PayPal payment will be handled using the phone or email you provided when making a selection, but the timing of delivery of your payment will be based on whether the email or phone you used is connected to an active account with those entities. Active account holders will have their payments deposited directly into their account within 7-10 business days of making their selection. Those using emails and phones not currently associated with an active account at the payment entity will receive an email or a text invitation from the entity to create an account and accept payment. Those payees who, within the timelines laid out in those invitations, create a new account or link the payment destination to an existing account, will receive their payment shortly after completing that process. Those payees who fail to do so will have their payments returned to the administrator.

Finally, those payees who chose ACH/Direct Deposit should generally have their payments land in their accounts within 3-5 business days of providing their banking information. For payees who provide invalid ACH/Direct Deposit information, the amount of time it takes to resolve the unsuccessful payment may be up to 30 days.

If you provided Epiq with invalid or old payment destination information, or you failed to act with the various payment entities in the time allowed, your payment can no longer be claimed digitally. If you believe that invalid information was provided when making your selection or that you did not act in time with the payment entities, you will need to submit a reissue request in writing and we will send you a paper check instead. Please submit your reissue request to:

MGM Data Incident Litigation
Settlement Administrator
P.O. Box 3020
Portland, OR 97208-3020

Include your name, old and new email addresses, the reason for your reissue request (bad/old data, etc.) and your current mailing address information. Requests not including the necessary information may be delayed. Due to the amount of time it take the various payment entities to return funds to Epiq, processing time, and mail time, reissue requests can take up 12 weeks to process after receiving your written request, so please be patient while we complete the reissue process.

Questions related to issues using payment cards, or management of funds once they are sent to your account, should be handled by the payment entity themselves. The following contact numbers and emails are available when reaching out to those entities. Call 1-888-812-4430 if you have any issues with your Venmo payment. Reference the payment destination (phone or email) you provided when requesting your payment. Call 1-844-340-1929 in the U.S. and Canada (toll free) or 1-682-324-9995 outside the U.S. and Canada (tolls apply) if you have any issue with your e-Mastercard or retail card issued by Blackhawk. If you provide your name, email address, amount you were sent, and the program that your payment relates to, Blackhawk should be able to service most requests. For ACH payments, you will need to contact your bank directly. If you have reached out to the payment entity that issued your payment, but they are not immediately able to assist you with your issue, you may reach out to Epiq to request further assistance. Please submit your inquiry to:

MGM Data Incident Litigation
Settlement Administrator
P.O. Box 3020
Portland, OR 97208-3020

Include your name, a detailed and specific explanation of the nature of your request, your current mailing address information, and any relevant emails, phones, or account information. Epiq will review and investigate your written submission. In some cases, Epiq may need to reach out to the payment entities individually to request more information, so please be patient while we handle your request.

The Lawyers Representing You

Yes, the Court has appointed John Yanchunis of Morgan & Morgan Complex Litigation Group, E. Michelle Drake of Berger Montague PC, Doug McNamara of Cohen Milstein Sellers & Toll, PLLC, David Berger of Gibbs Law Group LLP, J. Gerard Stranch IV of Stranch, Jennings & Garvey, PLLC, Lynn Toops of Cohen & Malad LLP, James Pizzirusso of Hausfeld LLP, Gary M. Klinger of Milberg Coleman Bryson Phillips Grossman PLLC, and Jeff Ostrow of Kopelowitz Ostrow P.A. as Class Counsel to represent you and the Settlement Class for the purposes of this Settlement. You may hire your own lawyer at your own cost and expense if you want someone other than Class Counsel to represent you in this lawsuit.

Class Counsel filed a motion asking the Court to award attorneys’ fees and costs payable out of the $45,000,000 Settlement Fund. They sought 30% of the Settlement Fund in attorneys’ fees and reimbursement of their litigation costs. Class Counsel asked the Court to approve Service Awards in the amount of $10,000.00 each for those Class Representatives who had their depositions taken and $3,500.00 each for all other Class Representatives. The Service Awards are for the Class Representatives’ efforts in participating in the Actions and for achieving the Settlement. The Attorneys’ Fees, Costs, and the Service Awards will be paid from the Settlement Fund.

The Final Approval of the Settlement including Class Counsel’s Attorneys' Fees, Costs, and Service Awards is posted in the Final Approval Order on the Important Documents page on this website.

Opting-Out From the Settlement

If you are a Settlement Class Member and want to keep any right you may have to individually sue or continue to sue the Released Parties on your own based on the legal claims in the lawsuits or released by the Released Claims, then you must take steps to get out of the Settlement. This is called excluding yourself from—or "opting-out" of—the Settlement.

The deadline to opt out of the Settlement passed on May 19, 2025.

No. If you opted out by the May 19, 2025, deadline, you will not be entitled to receive Settlement Class Member Benefits, but you will not be bound by the Settlement or any judgement in the lawsuits. You can only get Settlement Class Member Benefits if you stay in the Settlement and submit a timely and valid Claim Form.

No. Unless you opted out by the May 19, 2025, deadline, you give up any right to individually sue any of the Released Parties for the legal claims this Settlement resolves and Releases relating to the Data Incidents. You must have opted out of the lawsuits to start or continue with your own lawsuit against the Released Parties. If you have a pending lawsuit, speak to your lawyer in that case immediately.

Objecting to the Settlement

The deadline to object to the Settlement passed on May 19, 2025.

Objecting is simply telling the Court you do not like something about the Settlement or the requested Attorneys’ Fees, Costs, or Service Awards. You can object only if you stay in the Settlement Class (meaning you do not opt out of the Settlement). Opting out of the Settlement is telling the Court you do not want to be part of the Settlement Class or the Settlement. If you opt out, you cannot object to the Settlement.

The Final Approval Hearing

The Court held a "Final Approval Hearing" on June 18, 2025, at which the Court granted final approval of the Settlement.

The Court held a Final Approval Hearing on June 18, 2025, before the Honorable Gloria M. Navarro, II at the Lloyd D. George Federal Courthouse, 333 Las Vegas Blvd. South, Las Vegas, NV 89101. At this hearing, the Court ruled that the Settlement was fair, reasonable, and adequate, granting final approval of the Settlement and Class Counsel's Application for Attorneys' Fees, Costs and Service Awards.

If you are a Settlement Class Member and you did nothing, you will be part of the Settlement Class, but you will not receive any of the Settlement Class Member Benefits. Unless you requested to exclude yourself, you have lost your right to start a lawsuit, continue with a lawsuit, or be part of any other lawsuit against any of the Released Parties about the legal issues in this lawsuit that are released by the Settlement relating to the Data Incidents.

Getting More Information

This website summarizes the Settlement. Complete details about the Settlement are provided in the Settlement Agreement. You may get additional information by calling toll-free 1-888-899-8358, or by writing to:

MGM Data Incident Litigation
Settlement Administrator
P.O. Box 3020
Portland, OR 97208-3020

PLEASE DO NOT TELEPHONE THE COURT OR THE COURT’S CLERK OFFICE REGARDING THIS CASE.

You can find your Unique ID and PIN on your postcard or email notice. Notices began being sent to Settlement Class Members on February 20, 2025, and finished in April 2025. Please note that the deadline to file a claim passed on June 3, 2025.