Madison Square Garden Entertainment Corp. has notified individuals that their information was exposed in a security incident tied to Oracle E-Business Suite, an application hosted and managed on the company’s behalf by a vendor. Oracle disclosed that a previously unknown flaw in the application had been exploited by an unauthorized person, and reports indicate the same issue affected over 100 companies. A hacking or system intrusion of this kind allowed the attacker to access data from the application in August 2025. The vendor and an outside forensic firm investigated, and in late November 2025 confirmed the unauthorized access; by December 2025, the company determined that a file containing names and Social Security numbers had been involved. A similar third-party software incident is described in the SitusAMC Holdings Corporation breach notification, which also stemmed from a vendor system rather than a direct attack on the company itself.
The letter states that the affected files were part of business records related to hiring or payments made to individuals, meaning current or former employees, contractors, or others whose payment records were processed through this system are likely those affected. The company has not provided a specific total count of affected individuals in this letter.
What information was exposed?
- Full name
- Social Security number
Madison Square Garden Entertainment Corp. is offering one year of complimentary credit monitoring, credit report, and credit score services through Cyberscout, a TransUnion company. To enroll, log on to https://bfs.cyberscout.com/activate and use the unique code provided in your letter. You must enroll within 90 days from the date of the letter, dated February 23, 2026.
What should you do now?
- Enroll in the free Cyberscout credit monitoring before the 90-day deadline using the code included in your letter.
- Because your Social Security number was involved, consider placing a free credit freeze with Equifax, Experian, and TransUnion, which makes it harder for anyone to open new accounts in your name.
- Place an initial fraud alert on your credit file, which is free and lasts one year, and can be renewed if needed.
- Review your bank and credit card statements regularly for any charges or accounts you don’t recognize.
- Request your free annual credit reports at annualcreditreport.com and check for unfamiliar accounts or inquiries.
- Consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere.
- If you notice signs of fraud, file a report with local law enforcement and the FTC at identitytheft.gov, and keep a copy of any police report.
If you have questions, Madison Square Garden Entertainment Corp. can be reached at 844-784-8179 (Monday through Friday, 8:00 a.m. to 8:00 p.m. Eastern Time), or by mail at 2 Pennsylvania Plaza, New York, NY 10121.