Company Details
mgm-grand-detroit
887
4,678
7132
http://mgmgranddetroit.com
0
MGM_2464021
In-progress

MGM Grand Detroit Company CyberSecurity Posture
http://mgmgranddetroit.comMGM Grand Detroit is the city’s first and only downtown hotel, gaming and entertainment destination built from the ground up. The hotel features 400 chic and stylish guest rooms, including nine rooftop VIP suites and 56 opulent corner suites. The 147,000-square foot casino includes Detroit’s only premier poker room, nearly 150 table games, and nearly 2,500 of the hottest slots and video poker machines. Guests enjoy signature restaurants including Detroit’s modern steakhouse & lounge, D.PRIME; the hotel's own sports pub, TAP at MGM Grand Detroit; an urban food hall, Detroit Central Market; several bars and lounges; Detroit's premier sports betting destination, BetMGM Sports Lounge and IMMERSE, the only resort-style spa in Southeast Michigan. More than 30,000 square feet of meeting space hosts everything from large corporate events to intimate black-tie affairs. MGM Grand Detroit is a wholly owned subsidiary of MGM Resorts International (NYSE: MGM). For more information, visit mgmgranddetroit.com or call toll free at (877) 888-2121.
Company Details
mgm-grand-detroit
887
4,678
7132
http://mgmgranddetroit.com
0
MGM_2464021
In-progress
Between 750 and 799

MGD Global Score (TPRM)XXXX



No incidents recorded for MGM Grand Detroit in 2025.
No incidents recorded for MGM Grand Detroit in 2025.
No incidents recorded for MGM Grand Detroit in 2025.
MGD cyber incidents detection timeline including parent company and subsidiaries

MGM Grand Detroit is the city’s first and only downtown hotel, gaming and entertainment destination built from the ground up. The hotel features 400 chic and stylish guest rooms, including nine rooftop VIP suites and 56 opulent corner suites. The 147,000-square foot casino includes Detroit’s only premier poker room, nearly 150 table games, and nearly 2,500 of the hottest slots and video poker machines. Guests enjoy signature restaurants including Detroit’s modern steakhouse & lounge, D.PRIME; the hotel's own sports pub, TAP at MGM Grand Detroit; an urban food hall, Detroit Central Market; several bars and lounges; Detroit's premier sports betting destination, BetMGM Sports Lounge and IMMERSE, the only resort-style spa in Southeast Michigan. More than 30,000 square feet of meeting space hosts everything from large corporate events to intimate black-tie affairs. MGM Grand Detroit is a wholly owned subsidiary of MGM Resorts International (NYSE: MGM). For more information, visit mgmgranddetroit.com or call toll free at (877) 888-2121.


Turtle Creek Casino & Hotel is located at 7741 M-72, Williamsburg, MI 49690 just minutes away from Michigan's iconic Traverse City. Our 56,000-square-foot casino in Traverse City has everything you need to get your game on including video poker, craps, blackjack, Let It Ride, roulette, and all the l

RGB International's involvement in the gaming industry dates back to 1986 through its wholly-owned subsidiary, RGB Sdn Bhd. Presently listed as RGB International Berhad (Stock Code: 0037) on the Main Board of Bursa Malaysia, RGB continues to be a mainstay in the industry, being the leading supplier
Castle Hill Gaming is a prominent provider of Class II, Class III, and HHR gaming machines to Indian and Commercial Casinos across the United States, with offices located in Charlottesville, VA, Tulsa, OK, and Manchester, NH. CHG offers exciting employment opportunities for individuals passionate ab

Dynamic Gaming Solutions is a full-service gaming solutions provider. We offer everything from electronic slot machines to classic table games. As a full-service solutions provider, we provide the games, as well as provide the service and supplies to accompany the games. This provides our clients wi
BMM is the longest established and most experienced private independent gaming certification lab in the world. BMM has provided professional technical and regulatory compliance services to the gaming industry since 1981. BMM has been successfully testing and certifying the full scope of Class III,

Elys BMG Group. (OTC - ELYS). is a B2B global gaming technology company operating in multiple countries worldwide, with B2C online and land-based gaming operations in Italy. Elys offers its clients a full suite of leisure gaming products and services, such as sports betting, e-sports, virtual sports
.png)
The FBI continues monitoring an especially audacious group of young english-speaking hackers from the US, UK, and Canada known as Scattered Spider.
Personal information of 37 million people was compromised in the data breach which was perpetrated on September 9, 2023 and was discovered...
Kewadin Casinos will resume operations in phases starting Feb. 26, following a ransomware attack that forced closures.
When hit with a ransomware attack, the health care industry faces a dilemma: pay the ransom or try to restore the systems and data manually.
Hotel and casino giant MGM Resorts has revealed that it is investigating a "cybersecurity incident" that has resulted in its website being taken offline,...
VicOne, an automotive cybersecurity solutions leader, and Block Harbor, a trusted automotive cybersecurity engineering company,...
When seasoned gambler Denise Ezell, 65, won a $127,000 jackpot playing progressive blackjack at Detroit's MGM Grand last October,...
The company said it could face fines in connection with regulatory inquiries stemming from the social engineering attack.
Union members with the Detroit Casino Council have voted to ratify a new contract with MGM Grand Detroit, operated by MGM Resorts,...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of MGM Grand Detroit is http://mgmgranddetroit.com.
According to Rankiteo, MGM Grand Detroit’s AI-generated cybersecurity score is 770, reflecting their Fair security posture.
According to Rankiteo, MGM Grand Detroit currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, MGM Grand Detroit is not certified under SOC 2 Type 1.
According to Rankiteo, MGM Grand Detroit does not hold a SOC 2 Type 2 certification.
According to Rankiteo, MGM Grand Detroit is not listed as GDPR compliant.
According to Rankiteo, MGM Grand Detroit does not currently maintain PCI DSS compliance.
According to Rankiteo, MGM Grand Detroit is not compliant with HIPAA regulations.
According to Rankiteo,MGM Grand Detroit is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
MGM Grand Detroit operates primarily in the Gambling Facilities and Casinos industry.
MGM Grand Detroit employs approximately 887 people worldwide.
MGM Grand Detroit presently has no subsidiaries across any sectors.
MGM Grand Detroit’s official LinkedIn profile has approximately 4,678 followers.
MGM Grand Detroit is classified under the NAICS code 7132, which corresponds to Gambling Industries.
No, MGM Grand Detroit does not have a profile on Crunchbase.
Yes, MGM Grand Detroit maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mgm-grand-detroit.
As of November 27, 2025, Rankiteo reports that MGM Grand Detroit has not experienced any cybersecurity incidents.
MGM Grand Detroit has an estimated 894 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, MGM Grand Detroit has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.