MGM Resorts sued over data breach affecting up to 10.6M guests