The first legal complaint has been filed just a few days after MGM Resorts International confirmed a data breach of guest information.
As many as 10.6 million guests were impacted after a cloud server hack although the company says no financial data was compromised.
Customer John Smallman filed a lawsuit alleging MGM failed to protect his personal information.
It failed to provide ‘adequate and reasonable’ security procedures the suit says.
MGM has declined to confirm how many people were impacted although the 10.6 million number was widely reported in the media.
MGM says data stolen is mostly publically available information found in a Google search.
The lawsuit questions this, alleging driver’s license, military ID and passport numbers were also hacked.
With reports saying the stolen data was posted to a hacking forum, the data was put ‘in the hands of thieves.’
The law firm Morgan & Morgan said MGM ‘worked to conceal the full measure of the security breach from the public’ as it did not disclose last summer’s data breach until it was reported in the media.
"We will continue to hold companies accountable for the harm they cause in people’s lives until they start treating consumers’ data with the care it deserves."
The law firm also represented plaintiffs in the big Yahoo and Equifax breaches.
