Teen Charged in 2023 Vegas Casino Cyberattacks Released into Parental Custody


Published on: September 24, 2025, 09:49h.

Updated on: September 24, 2025, 09:49h.

A minor accused of involvement in the 2023 cyberattacks on two prominent Las Vegas casino operators was released into the custody of his parents following his initial court session on Wednesday.

Cyberattack Image
In 2023, cybercriminals utilized vishing (voice phishing) to impersonate employees and infiltrate the internal systems of MGM Resorts International and Caesars Entertainment on the Las Vegas Strip, resulting in hundreds of millions of dollars in losses. (Image: Shutterstock)

The adolescent — whose identity is protected by court regulations unless tried as an adult — surrendered to authorities on September 17 at the Clark County Juvenile Detention Center.

Family Court Judge Dee Smart Butler mandated that the 17-year-old, alleged to reside in Chicago, must remain in Clark County under parental guidance. His access to electronic devices and the internet is severely limited — only permitted for educational purposes or when supervised by a parent. Prosecutors noted that he was merely 15 at the time of the alleged crimes.

Prosecutors assert that the teen is affiliated with a cybercriminal group known by names such as Scattered Spider, Octo Tempest, UNC3944, and 0ktapus, and participated in cyberattacks against MGM Resorts International and Caesars Entertainment from August to October 2023, although they did not mention the casinos by name in court.

Reports indicate that Caesars paid a ransom of $15 million, while MGM declared losses of approximately $110 million, as detailed in an SEC filing.

Clark County Chief Deputy District Attorney Summer Clarke suggested that the teen might still control around $1.8 million in bitcoin associated with the hacks, though its whereabouts are currently unknown. She argued for continued detention based on the significant damages and compromised personal data, which included over 65,000 Social Security numbers.

“The sophistication he possesses and the criminal capabilities are significant and cannot be disregarded by this court,” she stated. “We cannot ascertain what access he has or to whom he has connections.”

She also disclosed that the FBI executed search warrants at the teen’s residence in Illinois twice, once in December 2023 and again in February 2025.

Defense attorneys David Chesnoff and Richard Schonfeld opposed Clarke’s motion, highlighting the teen’s clean slate regarding past criminal activity.

Judge Butler favored the defense’s argument, asserting that the teen’s parents and grandmother would remain with him in a temporary rental in Clark County. She ordered strict supervision and cautioned that any infractions would lead to detention.

The teen faces six felony counts, including three counts for obtaining and using personal identifying information to harm or impersonate others; one count of extortion; one count of conspiracy to commit extortion; and one count of engaging in unlawful acts concerning computers.

Prosecutors have indicated plans to seek additional charges and to push for the teen’s trial as an adult, with a decision anticipated at a hearing in November.

In July 2024, a second 17-year-old was apprehended in England related to the same cyberattacks.



Source link