Labels reflect guest-management and security practices, including social media monitoring for negative publicity rather than transparent criteria.

In June 2026, ShinyHunters released nearly 26 million records after a ransom demand, fueling three class‑action lawsuits alleging data leakage from MSG.

MSG allegedly maintained a large internal database cataloging high‑profile guests and critics, including risk assessments and labels tied to individual people, with entries dating back to 2020 and updates into 2026.

Context surrounding MSG’s practices ties into broader scrutiny of security and surveillance technologies at the venue and related properties.

The fallout includes public commentary from advocates and officials criticizing MSG’s data practices and questions about whether Dolan’s security culture contributed to vulnerabilities exposed by the breach.

The breach raises questions about privacy, security, and potential discrimination in how the database was used for monitoring or gatekeeping at the arena.

The database labeling was first reported by the hacker group ShinyHunters and covered by 404 Media, with Wired providing broader context.

Wired based its findings on documents from ShinyHunters and initial coverage by 404 Media.

Reports describe the system as paranoid and problematic, noting it tracked what public figures said or did that might attract unwanted attention.

The breach disclosed in June 2026 involved a large dataset with security concerns and separate databases, prompting scrutiny of how security data is stored and used.

MSG reportedly used facial recognition and surveillance to monitor individuals at the arena, including a transgender woman tracked for more than two years.

The coverage connects to prior reporting on Dolan‑led surveillance efforts across MSG properties, including detailed profiling aimed at separating a trans woman from players.