A security breach at Madison Square Garden (MSG) exposed sensitive data, including tax documents of a junior employee, Salesforce records with millions of customer details, and internal databases containing personal information about high-ranking officials.The hack, attributed to the ShinyHunters collective, involved phishing attacks on Microsoft Entra accounts to gain access to MSG's networks.Hackers threatened to leak the data unless a ransom was paid, highlighting vulnerabilities in corporate cybersecurity practices.

The breach revealed that MSG maintained a database of celebrities, fans, and even Taylor Swift’s wedding guests, with labels like 'LGBTQIA' and 'DO NOT HOST.' This incident underscores broader issues of overprivileged access in organizations, as highlighted by IT security experts.The leaked files included personal contact details of New York Police Department Commissioner Jessica Tisch, who was later appointed to the role.Despite the breach, MSG did not pay the ransom, leading ShinyHunters to release 45 gigabytes of data.

The incident raises concerns about how companies balance surveillance practices—such as facial recognition at venues—with data protection responsibilities.