Hackers have published data stolen from Madison Square Garden online for anyone to download, including what they say is customers’ personal information. A sample reviewed by 404 Media includes files mentioning specific sports teams, and specifically Knicks-related personalities, with fields such as “address,” “claim to fame,” “cost of talent,” and sometimes contact information for them or their representatives.
“It’s very simple. When you pay us, your data is deleted, and you move on with your life. When you don’t pay us, you get posted here, among other things,” a popup on the hackers’ website reads. The group publishing the data is Shiny Hunters, which has been responsible for an array of breaches over the years.
The data dump comes just days after the Knicks won the NBA Finals in five games against the Spurs. Although the breach likely happened before that—a spokesperson for the hacking group said the hack was on June 5—the Knicks’ victory has put a huge amount of attention on them and MSG.
Shiny Hunters published the MSG data on Tuesday. The full file download is nearly 45GB. A spokesperson of the group sent 404 Media a smaller sample of the data. One file includes what appear to be emails sent by customers to MSG and sometimes MSG’s response. One email is a man complaining about potentially being flagged by MSG’s facial recognition systems (MSG owner Jim Dolan has long spied on people inside his arenas, with MSG deploying various surveillance technologies, WIRED reported.)
The sample included a file with “Talent” in the filename, then a long list of high profile people in the sports world. It includes family members of MSG executives, former New York Knicks players and head coaches, and celebrities.
Ben Stiller, a huge Knicks fan and who was at MSG for the Knicks’ recent NBA finals games, is also included in the file. The contact information is an email address for Red Hour Films, the production company Stiller runs.
The file lists Stiller as “Low Risk,” although it's not clear from the file itself what that means. Only one person in the file is listed as “High Risk”: rapper A Boogie wit da Hoodie.
MSG did not immediately respond to a request for comment. The Shiny Hunters website indicates MSG did not pay a demanded ransom.
In March MSG confirmed it had suffered a data breach which targeted users of Oracle’s E-Business Suite. In that hacking campaign, the Cl0p ransomware group was responsible, SecurityWeek reported. Those hackers named MSG specifically as a victim in November 2025, the report added.
