The Madison Square Garden Entertainment Data Breach: What Current and Former Employees Should Know
Key Takeaways
- The Madison Square Garden Entertainment data breach exposed sensitive employee information across multiple iconic venues and brands. Current and former employees, contractors, and vendors tied to MSG properties may all be affected.
- This breach was preventable and reflects serious failures in data security and oversight. MSG is a multi-billion-dollar company that had a duty to safeguard employee data, yet relied on systems that left workers vulnerable to a known cyberattack.
- By waiting months to confirm and notify affected individuals, MSG Entertainment limited employees’ ability to take timely steps to protect themselves from identity theft, fraud, and financial damage.
- Workers whose personal information was compromised may be entitled to pursue legal action to hold MSG Entertainment accountable and seek compensation for the risks and harm caused by the company’s lax data security practices.
Injured?
Recent disclosures confirm a massive data breach at Madison Square Garden Entertainment Corp. (MSGE) has exposed the sensitive personal information of tens of thousands of current and former employees, contractors, and vendors, including Social Security numbers and other identifying details.
This breach, which stemmed from a widespread hack of Oracle’s E-Business Suite affecting over 100 organizations globally, was first exploited in August 2025 but only acknowledged publicly months later.
For people who worked for MSGE and trusted that the company would safeguard their personal information, especially something as critical as Social Security numbers, this is a profound failure of basic duty and corporate responsibility.
Who Has Been Affected? Anyone Employed by Any MSGE Venue or Brand
Madison Square Garden Entertainment is not just one arena in the center of Manhattan; it’s a sprawling entertainment empire whose data systems cover employees, stagehands, contractors, and corporate staff across many famous properties and brands.
If you worked anywhere under the MSGE umbrella, your data may have been exposed:
Live Entertainment and Performance Venues:
- Madison Square Garden: the iconic arena in New York City.
- The Theater at Madison Square Garden (Hulu Theater): adjacent performance space.
- Radio City Music Hall: historic Manhattan performance venue.
- Beacon Theatre: landmark theater on Broadway.
- The Chicago Theatre: a historic entertainment venue in Chicago.
- Sphere: Las Vegas arena known for its giant orb presence in the skyline and its immersive experiences, now a separate company but originally part of the MSGE umbrella.
- Christmas Spectacular Starring the Radio City Rockettes: an annual production that includes the Rockettes cast and crew.
Associated Hospitality and Event Brands (under the MSGE enterprise):
Beyond venues, MSGE’s portfolio includes restaurants, nightclubs, and event brands through Tao Group Hospitality, such as:
- Tao
- Marquee
- Lavo
- Avenue
- Beauty & Essex
- Cathédrale
All of these brands are part of the broader MSGE ecosystem and may be linked to employee payroll, HR systems, or data repositories connected to the breached Oracle environment.
Why This Matters
For MSGE employees and contractors whose data was compromised, especially Social Security numbers, the harm is real and ongoing.
Identity theft risks can last decades. Once your SSN is in criminal hands, the threat doesn’t go away. Credit, financial accounts, medical records, and tax filings can be targeted by fraudsters for years to come.
Additionally, MSGE delayed notifying affected individuals for months after discovery, which is unacceptable and may violate legal obligations.
MSG Entertainment’s Lax Security Put Workers at Risk
This incident should prompt some serious questions.
How did MSGE, a multi-billion-dollar entertainment corporation, fail to protect employee data? Why did it take months to confirm and disclose the breach? What safeguards were in place before the breach, and why didn’t they work?
Companies that handle sensitive personal data have a legal duty to protect it, and when they fail, affected individuals have rights, including the potential to pursue legal claims for damages, identity monitoring costs, and more.
What Affected Employees Should Do Now
If you are or were an employee, a contractor, a stagehand, or even a vendor whose information was stored by MSG Entertainment’s systems, then you should consider your legal options and take the following steps:
1. Monitor Your Identity and Credit: Place fraud alerts and monitor your credit reports regularly.
2. Keep Records of All Notices or Communications: Documentation may be critical if you pursue a claim.
3. Consult With a Lawyer at Morgan & Morgan Experienced in Data Breaches and Privacy Claims: Morgan & Morgan can help evaluate whether MSGE’s failure to protect your information breaches legal standards and what compensation you may be entitled to.
A data breach of this scale is more than a “mistake.” This is a systemic failure that deserves accountability and action.
Employees who were harmed by MSG Entertainment’s lax security practices deserve full legal remedies for the risks and damage they now face.
If you were employed at any of Madison Square Garden Entertainment’s properties, contact Morgan & Morgan today for a free case evaluation to learn more about your legal options.
It’s free. It’s fast. It’s easy, and with no obligation.

We've got your back
Injured?
Not sure what to do next?
We'll guide you through everything you need to know.