Threat actor attacked MGM Resorts, gained access through social engineering, escalated privileges, stole data, and encrypted hypervisors. MGM's containment efforts failed. Actor threatened additional attacks and claimed ongoing access. Incident response continued with outside aid. Information aids understanding of attacker techniques for improved security defenses.