MGM hack exposes personal data of 10.6M guests
bbc.com
bbc.com
I literally sent them an email on September 1st, 2019 because I was given an automated "forgot my password" email that included...wait for it....my original password in plain text.
Maybe they've learned their lesson?