Madison Square Garden Confirms Data Breach After Ransomware Attack
Want more insights like this?
Madison Square Garden has officially confirmed a data breach months after the Cl0p ransomware group targeted its Oracle E-Business Suite system in August 2025. The hackers exploited zero-day vulnerabilities and stole over 210GB of data from MSG's third-party hosted system, including names and Social Security numbers of customers.
The breach was part of a larger cybercrime campaign that hit more than 100 organizations using Oracle's enterprise software. Cl0p publicly named MSG as a victim in November and leaked the stolen data after the company apparently refused to pay ransom demands.
MSG Entertainment is now notifying affected individuals, with at least 11 Maine residents confirmed impacted, though the total number of victims remains unclear.
Source: Security Week