← Madison Square Garden Entertainment

2026 MSG Entertainment — 131K records (Oracle EBS zero-day, Clop)

2026 131.0K records affected Share on X

Data compromised

Names, SSNs, physical addresses, hiring and payment records

Technical writeup

Madison Square Garden Entertainment suffered unauthorized access Aug 10–Oct 21, 2025 via zero-day in Oracle eBusiness Suite (third-party vendor). Discovered Dec 16, 2025. Clop ransomware group suspected. Exposed: names, SSNs, physical addresses, hiring/payment records. Notifications began early 2026; one year credit monitoring offered.

Root cause

Oracle eBusiness Suite zero-day; Clop ransomware campaign

References