MGM confirmed in February that last summer it discovered a breach that reportedly may have affected 10.6 million hotel guests.
The lawsuit in Las Vegas federal court claims that the company failed to adopt “adequate and reasonable” cybersecurity practices or safeguard his personal details.