Is BetMGM Safe? Licensed, But Breached in 2022

Is BetMGM Safe?

Is BetMGM safe? For licensing and regulatory backing, yes — state gaming commissions, geolocation enforcement, and standard responsible-gambling tools are all real. For data security specifically, the honest answer needs an asterisk: BetMGM disclosed in 2025 that a breach discovered in late 2022 had exposed personal information on roughly 1.5 million customers, and a separate 2023 cyberattack hit parent company MGM Resorts. Neither one is the same story as licensing safety, and a reader asking "is BetMGM safe" deserves both halves.

Is BetMGM safe? Split the question in two and the answer changes. Ask about licensing, payouts, and account-level controls, and yes — this is a state-regulated operator with geolocation that actually works and responsible-gambling tools that follow a player across state lines. Ask about data security specifically, and the record includes a real breach that exposed personal information on roughly 1.5 million people. Both are true. Neither cancels the other out.

Licensing Safety: The Part That Checks Out

BetMGM holds individual sportsbook licenses in 23 states plus Washington D.C. as of September 2026, each one issued and audited by that state's own gaming regulator. Geolocation software confirms a bettor is physically inside a licensed state before a wager is accepted — it is the mechanism that makes "legal in my state" an enforceable fact rather than a marketing line. That infrastructure is the same across every state-licensed operator this site reviews, and BetMGM meets it.

The 2022 Breach BetMGM Disclosed

BetMGM discovered a data security incident in November 2022 that it later determined had occurred the previous May. The exposed data included names, contact information, dates of birth, hashed Social Security numbers, account identifiers, and transaction-related information, affecting an estimated 1.5 million current and former customers. Class-action filings allege some of that information sat in an unencrypted, internet-accessible database — a claim distinct from what was taken, and one BetMGM has faced in litigation rather than conceded outright.

What BetMGM says wasn't touched: the company has stated it found no evidence that account passwords or funds were accessed, and that its online betting operations continued running without disruption through the incident.

A Separate, Bigger Incident: MGM Resorts, September 2023

A year later, majority co-owner MGM Resorts was hit by its own cyberattack that forced a shutdown of casino-floor systems across its properties and cost roughly $100 million in adjusted earnings. Criminal actors obtained data including driver's license numbers and, for a limited number of customers, Social Security and passport numbers. BetMGM's online sportsbook was widely reported as largely unaffected by this second, larger incident — the outage was concentrated in MGM's physical casino systems and some BetMGM-branded kiosks on property, not the mobile app itself.

The Account Tools That Are Actually Real

Separate from the breach history, BetMGM's in-app safety tools are genuine and consolidated: deposit, loss, and session limits set in the Responsible Gaming menu, time-outs, and self-exclusion built on GameSense, the program MGM Resorts licenses and has used to certify more than 3,000 staff as GameSense Advisors since integrating it into the app in 2022. A restriction set in one state follows the account into every other state BetMGM operates in.

What to Actually Do With This

Use a password unique to BetMGM, not one reused from another account — the single highest-value step after any breach disclosure, regardless of brand.
Treat identity-verification requests inside the official app as normal; treat unsolicited emails or texts referencing either incident asking you to "re-verify" by clicking a link as phishing.
Set a deposit or session limit through GameSense tools if you haven't already — unrelated to the breach, but the actual safety feature most players never turn on.

Licensed and regulator-accountable: yes. A perfect data-security record: no. Both facts belong in the same answer. Treat any deposit as entertainment spend, not income. 21+ where legal. 1-800-GAMBLER.

Is BetMGM safe? — Frequently Asked Questions

Is BetMGM safe?

Yes, in the sense that matters for placing and collecting a bet: it holds individual state gaming licenses in 23 states plus D.C. as of September 2026, geolocation software enforces those state lines, and standard account-security features (two-factor login options, session limits, self-exclusion) are in place. It is not a spotless data-security record — see the 2022 breach below — so "safe" here means regulated and accountable, not breach-free.

Was BetMGM hacked?

Twice, in two different ways. BetMGM itself disclosed a breach discovered in November 2022 (occurring that May) that exposed personal data for roughly 1.5 million customers. Separately, parent company MGM Resorts suffered a much larger cyberattack in September 2023 that disrupted casino properties and exposed additional customer data; BetMGM's online sportsbook was reported as largely unaffected by that second incident, though some in-casino BetMGM kiosks were.

What data was exposed in the BetMGM breach?

Per breach notifications and subsequent litigation, the 2022 incident exposed names, contact information, dates of birth, hashed Social Security numbers, account identifiers, and information related to transactions. BetMGM has stated it found no evidence that account passwords or funds were accessed. Lawsuits allege some of this data was stored in an unencrypted, internet-accessible database, which is a separate claim from what data was taken.

Is it safe to give BetMGM my Social Security number?

State gaming regulators require identity verification, including SSN collection, from every licensed US sportsbook and casino operator — it is not unique to BetMGM and is not optional if you want to withdraw. The 2022 breach is the legitimate reason to ask the question, and the honest answer is that verification is mandatory across every licensed competitor on this site, not a BetMGM-specific risk to avoid by picking a different regulated brand.

What responsible-gambling tools does BetMGM offer?

Deposit, loss, and session limits (decreases apply instantly, increases carry a cooling-off period), time-outs, and self-exclusion, all built on GameSense, the responsible-gaming program MGM Resorts licenses and has used to certify more than 3,000 employee "GameSense Advisors." A time-out or self-exclusion set in one state carries across every other state where the account is active.