ShinyHunters Leak Facial Recognition Data From Madison Square Garden Visitors

Executive Briefing

• Cybercriminal group ShinyHunters published millions of records stolen from MSG Entertainment after a missed ransom deadline
• Leaked data reportedly includes biometric facial recognition records, internal threat assessments, and visitor background-check information
• Breach exposes customer complaints about misidentification, stored alongside the very surveillance data that generated them
• Incident marks a second major cybersecurity event for MSG within a year, raising questions about data governance
• Highlights a critical vulnerability: comprehensive biometric surveillance databases become high-value targets for cybercriminals