Madison Square Garden Data Breach Exposes Biometric and Personal Information

• •Over 26 million records compromised in the MSG data breach attributed to ShinyHunters.
• •Lawsuit alleges negligence in cybersecurity measures and failure to notify affected individuals.
• •Sensitive biometric data, including facial recognition profiles, was part of the exposed information.

A class action lawsuit has been filed against Madison Square Garden Entertainment Corp. following a June 2026 cyberattack that compromised over 26 million records, including sensitive biometric data. The lawsuit claims that the company failed to implement adequate cybersecurity measures, allowing the cybercriminal group ShinyHunters to infiltrate its network. Affected individuals include employees, visitors, and customers whose personal information was stored by MSG. The breach reportedly involved unencrypted consumer records and sensitive threat-assessment data linked to facial recognition technology. Plaintiffs allege negligence and seek damages, claiming ongoing risks of identity theft and financial fraud. MSG has not publicly acknowledged the breach or notified affected individuals, leaving them unaware of the data compromised. The lawsuit emphasizes the potential misuse of the exposed data, including identity theft and fraud.