Madison Square Garden Confirms Data Breach Tied to Oracle EBS Campaign
Summary
Madison Square Garden confirmed a breach tied to the Oracle EBS campaign. A vendor investigation found data was stolen in August 2025; names and SSNs were compromised. MSG reported 11 affected Maine residents, but the total is unclear.
Key points
- MSG confirmed that a cybersecurity incident compromised personal information, including names and Social Security numbers.
- A third-party vendor’s investigation found that hackers stole data from the affected Oracle EBS instance in August 2025.
- MSG said the Oracle EBS instance was hosted and managed by a third-party vendor.
- MSG reported 11 affected Maine residents; the total number of people affected is unknown.
- Cl0p had named MSG as a victim in November 2025, and cybercriminals later leaked more than 210GB of allegedly stolen archive files.
Article Details
- Victim Organization
- Madison Square Garden (MSG)
- Incident Type
- Data breach involving an Oracle E-Business Suite instance, attributed in the article to the Oracle EBS cybercrime campaign
- Data Types Exposed
- Names
- Social Security numbers (SSNs)
- Affected Records
- The total number is unknown; 11 Maine residents were reported as affected.
- Affected Data Size
- More than 210 GB of archive files were allegedly stolen and leaked.
- Operational Impact
- MSG confirmed a data breach and began notifying affected individuals. No operational disruption was reported.
- Ransom Or Extortion
- The article says the leaked data indicated that MSG had refused to pay a ransom; the alleged refusal was not independently confirmed.
- Claim Status
- confirmed