Madison Square Garden Data Stolen After Employee Falls for Phone Scam
Hackers tricked a Madison Square Garden employee over the phone and stole 45GB of company data. This shows how one call can compromise an entire organization.
Source
DataBreaches.net
Original headline: How Hackers Broke into Madison Square Garden
Plain-English summary by GetCyberRight. Read the full report at the source above.
Madison Square Garden, the famous New York venue, had a large amount of data stolen by hackers. The breach happened because hackers called a low level employee and tricked them into giving access to the company's computer systems. The hackers then downloaded 45GB worth of company data. This type of attack is called social engineering, where criminals manipulate people instead of breaking through technical security.
This breach primarily affects Madison Square Garden as a business and potentially its employees. The stolen data may include internal company information and employee records. If you attended an event at Madison Square Garden or bought tickets there, your payment information was likely processed by a separate ticket vendor and may not be affected by this specific breach. Madison Square Garden has not announced what data was stolen.
Stay one step ahead of scammers
Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.
If you are concerned about your information, here is what you should do:
- If you have an account on Madison Square Garden's website, change your password to something strong and unique.
- Monitor your credit card statements for any unusual charges, especially if you have purchased tickets or merchandise from MSG recently.
- Be alert for phishing emails that claim to be from Madison Square Garden or Ticketmaster.
- Watch for any official notifications from Madison Square Garden about this breach. This incident shows why phone security matters everywhere, including at work. Teach family members to be skeptical of unexpected calls asking for access to computer systems or sensitive information. At work, always verify the identity of callers through official channels before providing any access or information. If something feels wrong about a call, trust your instincts. Hang up and verify through official contact methods. Companies should train all employees, not just IT staff, to recognize these tactics.
Curated from trusted cybersecurity sources by GetCyberRight
Source: DataBreaches.netStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles

International Police Operation Shuts Down Major Criminal Hacking Networks
Law enforcement agencies worldwide took down criminal networks responsible for spreading ransomware and data-stealing malware in a coordinated strike.
2 min read
International Police Operation Shuts Down Major Malware Networks
Europol and global partners dismantled criminal networks spreading ransomware and malware including SocGholish, Amadey, and StealC.
2 min readFree Cybersecurity Certification Now Available for Career Changers
ISC2 made their professional cybersecurity certification completely free, including exam and study materials. It's a legitimate path into tech careers.
3 min readHow to Get Professional Cybersecurity Training for Free (And Why You Should)
ISC2 offers globally recognized cybersecurity certification at no cost, giving families the skills to protect themselves online without spending a penny.
4 min read