- ShinyHunters claims to have stolen 46 GB of data containing more than 26 million records.
- Exposed information allegedly includes customer records, celebrity information, talent assessments, and internal corporate documents.
- Security experts warn the incident highlights the growing cyber risks facing professional sports organizations.
Madison Square Garden Sports and the New York Knicks are facing mounting cybersecurity concerns after the cybercrime group ShinyHunters allegedly published stolen data following failed ransom negotiations.
The English-speaking hacking group first listed Madison Square Garden Sports (MSGS) on its dark web leak site on June 12, claiming responsibility for a large-scale data breach involving approximately 46 GB of compressed data.
According to the threat actors, the stolen archive contains more than 26 million customer and corporate records. The hackers alleged that the compromise occurred on June 5 but was publicly disclosed only after the Knicks’ recent championship victory, a timing that researchers believe may have been intended to maximize media attention and pressure the organization.
Initially, ShinyHunters did not release any samples of the alleged data. However, on June 16, after an apparent ransom deadline passed, the group reportedly published portions of the stolen information for download.
The group issued a warning to the organization, stating: “It’s very simple. When you pay us, your data is deleted, and you move on with your life. When you don’t pay us, you get posted here.” At the time of publication, Madison Square Garden Sports has not publicly confirmed the breach, and the attack vector used by the attackers remains unknown.
Celebrity, Talent, and Customer Data Allegedly Exposed
According to reports, the leaked information includes personal details belonging to customers, corporate records, and information associated with Knicks talent, coaches, and, in some cases, their representatives. The exposed records allegedly contain:
- Names and contact information.
- Residential addresses.
- Internal notes regarding talent.
- Representative information.
- Customer support records.
- Background screening information.
- Facial recognition-related data.
- Internal business assessments.
One of the more controversial aspects of the alleged leak involves confidential internal evaluations. Leaked records reportedly categorized Ben Stiller, the comedian, as “Low Risk,” whereas “A Boogie wit da Hoodie (rapper) came out as “High Risk.”
Other internal fields allegedly included “claim to fame” and “cost of talent” assessments used for partnerships, appearances, and business decisions. Such information may create reputational risks for both the individuals involved and the organization itself.
Experts Warn About Identity Risks
Brian Bell, CEO of FusionAuth, said the incident demonstrates how identity data has become critical infrastructure. “While there will be plenty of commentary on the celebrity names, the most important aspect of the Madison Square Garden breach is the richness of the identity data,” Bell said.
He specifically pointed to reports involving customer complaints regarding facial recognition systems, arguing that modern identity systems extend far beyond usernames and passwords.
“A password can be reset; a customer standing with a brand, once it’s public that they were quietly labeled, cannot,” Bell added. Shane Barney, Chief Information Security Officer at Keeper Security, warned that anybody who has bought tickets, attended events, or reached out to MSG support centers in recent years should remain vigilant.
“Anybody who has bought tickets, reached out to the MSG support team, or gone to events at their venues recently can assume their contact information may be among the exposed data,” Barney said. He warned that attackers may leverage the stolen information for phishing emails, text messages, or fraudulent communications that reference legitimate purchases or accounts.
Sports Industry Faces Growing Cyber Threats
The alleged incident comes as cybersecurity threats against professional sports organizations continue to increase.
Nathaniel Jones, Vice President of Security and AI Strategy at Darktrace, noted that attacks against sports organizations have become increasingly common.
The threat landscape is also evolving in terms of platforms, as dark web crackdowns intensify, cybercriminals are shifting to Telegram to sell stolen data and coordinate attacks.
“Our recent research found that 84% of pro sports organizations faced a hit from bad actors in the past year, and 57% got hit more than once,” Jones said.
Madison Square Garden has previously experienced cybersecurity incidents. In 2025, the Clop ransomware campaign reportedly targeted the organization’s Oracle E-Business Suite environment, exposing internal data. Earlier breaches between 2015 and 2016 affected payment card systems at MSG venues.
Meanwhile, ShinyHunters continues to be one of the most active cybercriminal groups targeting major organizations. The group has carried out numerous high-profile breaches targeting cloud environments, SaaS platforms, credential theft, social engineering schemes, and third-party services.
If the published files prove authentic, the incident could become one of the most significant sports-related data breaches reported in recent years, potentially affecting customers, employees, athletes, celebrities, and business partners connected to Madison Square Garden and the New York Knicks.
