Madison Square Garden Entertainment Discloses Data Breach
TL;DR
Madison Square Garden Entertainment disclosed a data breach affecting over 131,000 individuals, linked to the Clop ransomware group exploiting an Oracle EBS vulnerability in late 2025.
Source: Upguard
Madison Square Garden Entertainment, which operates sports and performance venues in New York City and Chicago, disclosed a data breach Feb. 26, 2026, involving unauthorized access to its Oracle eBusiness Suite application. The incident occurred between Aug. 10, 2025, and Oct. 21, 2025, and was later discovered by the organization on Dec. 16, 2025. The breach reportedly impacted the personal information of over 131,000 individuals. Cybersecurity researchers have linked this breach to the Clop (Cl0p) ransomware group. In late 2025, Clop conducted a massive "one-to-many" campaign targeting dozens of organizations using the same Oracle EBS vulnerability. Full Story