Cybersecurity Incident Disrupts Jay-Z Concert, Causes Widespread Delays A security breach at a recent Jay-Z concert in New York City led to significant disruptions, including lengthy delays and chaotic conditions for attendees. The incident, which occurred during the artist’s highly anticipated performance at Madison Square Garden, stemmed from a cyberattack targeting the venue’s ticketing and access control systems. According to reports, hackers exploited vulnerabilities in the digital infrastructure, compromising electronic ticket validation and entry protocols. The breach resulted in long lines, frustrated crowds, and temporary halts in admission as staff scrambled to implement manual verification processes. While officials confirmed no personal or financial data was exposed, the attack disrupted operations for hours, forcing organizers to adjust event logistics on short notice. The incident highlights the growing risks of cyber threats in live entertainment, where digital ticketing and access systems are increasingly targeted. Authorities are investigating the source of the breach, though no group has claimed responsibility. The event’s organizers have since reinforced security measures to prevent future disruptions.

MSG Entertainment Hit with Lawsuit Over Undisclosed Data Breach Exposing Biometric and Personal Data Madison Square Garden Entertainment (MSG Entertainment), the operator of New York’s iconic Madison Square Garden, is facing a federal lawsuit in New York over its failure to notify affected individuals of a data breach. The incident, disclosed by the cybercrime group ShinyHunters less than 48 hours after the New York Knicks’ NBA Finals victory on June 16, involved the theft and subsequent leak of sensitive data including biometric records, facial recognition data, credit scores, and Social Security numbers. The breach occurred on June 17, but MSG Entertainment allegedly did not inform impacted individuals, prompting plaintiff Carlos Avalo who attended a concert at MSG in September 2025 to file the lawsuit. Avalo claims his personal data was collected during the event and is now "gravely concerned" it was exposed in the breach. The complaint highlights MSG Entertainment’s history of controversial data collection practices, including the use of facial recognition to categorize attendees by perceived risk (e.g., labeling rapper A Boogie wit da Hoodie as "high risk" while actor Ben Stiller was deemed "low risk"). While MSG Entertainment and Madison Square Garden Sports (the separate entity owning the Knicks and Rangers) are distinct companies, both are led by CEO James Dolan. The lawsuit targets MSG Entertainment for its alleged inadequate response, accusing the company of failing to address the breach transparently or mitigate the fallout. As of now, neither Dolan nor MSG Entertainment has publicly commented on the incident or negotiations with the hackers. The breach underscores growing concerns over the security of biometric data and corporate accountability in the wake of cyberattacks. With no official statement from MSG Entertainment, the legal and reputational consequences remain unresolved.

MSGE Data Breach Exposes Personal Information of Over 131,000 Individuals Madison Square Garden Entertainment (MSGE), the operator of high-profile sports and entertainment venues in New York City and Chicago, disclosed a cybersecurity incident on March 2, 2026, affecting the personal data of more than 131,000 individuals. The breach involved unauthorized access to MSGE’s network, potentially compromising sensitive personally identifiable information (PII), including names, addresses, and Social Security numbers. The law firm Lynch Carpenter, LLP, has launched an investigation into the incident, inviting affected individuals to review potential legal claims. The firm, known for its work in data privacy litigation, has represented millions of clients in similar cases over the past decade. MSGE has not yet released further details on the breach’s origin, timeline, or remediation efforts. The incident adds to a growing list of high-profile data exposures in the entertainment and hospitality sectors, raising concerns about the security of customer and employee records.

MSG Entertainment Investigates Data Breach Impacting Customer Personal Information New York-based Madison Square Garden Entertainment Corp. (MSG Entertainment) is under investigation following a data breach discovered on December 16, 2025, that exposed sensitive customer information. The incident stemmed from a vulnerability in the Oracle eBusiness Suite, hosted by a third-party vendor, which was exploited by hackers as early as August 2025. The breach potentially compromised names, addresses, and Social Security numbers of affected individuals. MSG Entertainment has since begun notifying impacted customers via mail. Edelson Lechtzin LLP, a national class action law firm, is leading an investigation into potential legal claims on behalf of those whose data was exposed. The firm specializes in data privacy litigation and is evaluating remedies for affected parties. MSG Entertainment operates high-profile venues, including Madison Square Garden, Radio City Music Hall, the Beacon Theatre, and the Chicago Theatre. The full scope of the breach and the number of individuals affected remain under review.

Madison Square Garden Hit with Class Action Lawsuit Over Massive Data Breach Madison Square Garden Entertainment (MSG Entertainment) faces a proposed class action lawsuit after cybercrime group ShinyHunters claimed to have breached its systems, exposing sensitive data from up to 26 million visitors. The lawsuit, filed in New York federal court on Tuesday, alleges the hack compromised biometric facial recognition data, background checks, credit scores, and Social Security numbers information collected through controversial surveillance systems at the arena. The breach was disclosed one day after the New York Knicks secured the 2025-26 NBA championship in San Antonio. ShinyHunters initially demanded a ransom before publishing 42 gigabytes of stolen data, including internal risk assessments of high-profile figures like actor Ben Stiller (labeled "low risk") and rapper A Boogie wit da Hoodie ("high risk"). Plaintiff Carlos Avalo, who attended a concert at MSG in September 2025, claims his personal data was among the exposed records. The lawsuit criticizes MSG Entertainment’s response as "woefully insufficient", noting the company has yet to notify affected individuals. As of Wednesday, MSG had not issued a public statement. This is not the first breach for MSG. The lawsuit highlights two prior incidents one a decade ago and another in 2024 where hackers accessed consumer data, including credit card and Social Security numbers. Despite these incidents, the company continued collecting biometric data, drawing criticism from privacy advocates and New York Attorney General Letitia James, who previously scrutinized MSG’s use of facial recognition to ban lawyers from games over litigation disputes. The complaint, which includes negligence claims, seeks at least $5 million in damages and could expand to cover millions of affected individuals. The case underscores growing cybersecurity risks in the sports industry, with a recent Darktrace report finding 84% of surveyed sports organizations experienced at least one cyber incident in the past year. MSG Entertainment, led by CEO James Dolan, remains the sole defendant, while its sister company, Madison Square Garden Sports (owner of the Knicks and Rangers), is not named in the suit.

The Madison Square Garden Company notified customers that there's a chance fraudsters have obtained their credit card information. In the past year, credit card data used at Madison Square Garden has been taken by thieves, the corporation claims, using a PoS malware on its payment processing system. Credit card numbers, cardholder names, expiration dates, and internal verification codes are among the payment card data that hackers have obtained. The Madison Square Garden corporation announced the security lapse and made it clear that only patrons who paid with their cards in person for food, drinks, or merchandise may access its venues. The group claims that buyers were not exposed when they made ticket and goods purchases online.

The California Office of the Attorney General reported on November 22, 2016, that The Madison Square Garden Company experienced a data breach affecting payment card data. The breach may have impacted payment cards swiped between November 9, 2015, and October 24, 2016, exposing card numbers, cardholder names, expiration dates, and internal verification codes.