The Madison Square Garden Company

The Madison Square Garden Family of Companies notified consumers of a data breach involving Oracle eBusiness Suite. An unauthorized party exploited a vulnerability in the application, hosted by a vendor, to access workforce and financial data including names and Social Security numbers starting in August 2025. The incident was discovered in November 2025. Affected individuals were offered one year of credit monitoring.

The Madison Square Garden Company reported a data breach to the Oregon Attorney General. The breach was reported on 2016-11-22. The breach occurred during 11/9/2015. The breach was discovered on 10/27/2016. 1 individuals were affected. Notice was sent on 11/22/2016.

The Madison Square Garden Company disclosed a payment card breach affecting magnetic stripe data swiped at MSG venues between November 2015 and October 2016. External unauthorized access led to the installation of malware capturing card numbers, names, and expiration dates. MSG engaged security firms, fixed the vulnerability, and notified customers.

The Madison Square Garden Company, a business sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2016-10-27 and filed notice on 2016-11-22. 26 days elapsed between awareness and notification. 353 days to identify the breach. 0 days to contain the breach.