Celebrity ‘Risk’ Tags at Madison Square Garden

A hacked Madison Square Garden database shows a private arena quietly building detailed files on celebrities and fans based on sexuality, race, and “risk” level — raising hard questions about how far corporate surveillance can go before it tramples basic American rights.

Story Snapshot

Hackers leaked a Madison Square Garden “talent” database tagging 93 celebrities as “LGBTQIA” alongside race, gender identity, and risk scores.
The same leak exposed a much larger customer file with over 10 million email addresses and years of personal data tied to ticket buying and arena visits.
Prior reporting says security tracked a transgender Knicks fan’s movements in minute detail and compiled an 18‑page dossier on her visits.
Madison Square Garden denies discrimination and calls the reporting “false,” even as class‑action lawsuits accuse the company of reckless data collection and weak security.

What The Leak Says About Madison Square Garden’s Secret Files

Wired reporters reviewed stolen Madison Square Garden security files and found a “talent” database with nearly 40,000 names from sports, politics, business, and entertainment. Entries included tags such as “LGBTQIA,” “DO NOT,” and graded “risk” levels, and some records noted race or gender identity. The outlet reported 93 celebrity entries marked “LGBTQIA,” including well‑known musicians and actors, in a system that also decided who could get free tickets or special access.

Hackers from the group ShinyHunters say they stole about 45 gigabytes of internal Madison Square Garden data and then dumped it online after a “pay or leak” extortion effort. Security researchers reviewing the breach report almost 10 million unique email addresses tied to staff and customers, along with employment and customer‑relationship records stretching back years. Wired found another database of more than 10.5 million entries that appeared to draw from the company’s Salesforce system, mixing ticket purchases, contact details, and other personal information.

Patterns Of Surveillance And The Trans Fan Lawsuit

The leaked files landed on top of earlier reports that Madison Square Garden security did more than routine crowd control. One detailed case describes a transgender Knicks fan whose movements were tracked “over and over,” with times logged for scanning her ticket, using elevators, ordering drinks, and even how long she stayed in the women’s restroom. An employee said she posed no threat, yet security built an 18‑page dossier on her and aimed to keep her away from players, fueling a 2025 lawsuit over stalking and harassment.

Digital rights advocate Evan Greer told Wired the pattern suggests arena leadership is “particularly interested in queer and trans people” inside their venues. That concern matters because the Madison Square Garden company also owns the Sphere in Las Vegas and Radio City Music Hall in New York, where similar surveillance tools are reportedly in place. Class‑action complaints now argue the company has blended facial recognition scans with social media activity since at least 2018 to assemble threat profiles on visitors far beyond normal safety needs.

Madison Square Garden’s Denials And The Fight Over Venue Power

Madison Square Garden insists it is doing nothing wrong and frames its surveillance as standard security. In earlier statements about facial recognition, the company said the technology helps identify violent patrons and rule breakers, including lawyers it wants to keep out of the building. After Wired’s latest reporting, a spokesperson told one outlet the claims were “inaccurate and false” and said the company is pursuing legal remedies, without publicly engaging the specific tags and risk scores revealed in the hack.

Madison Square Garden reportedly maintained internal “risk scores” on roughly 400 celebrities, executives and public figures within a larger VIP database of nearly 40,000 entries, according to @wired.

MSG disputes the report.

MORE: https://t.co/rkWy4JLoRS pic.twitter.com/zZXzdULQSO

— Sports Business Journal (@SBJ) July 10, 2026

Lawsuits tell a different story, accusing Madison Square Garden of failing to protect fans’ data and using powerful tools to quietly sort people based on speech and identity. One federal class action filed in New York argues the arena did not use reasonable cybersecurity measures to guard the information it gathered from millions of visitors. Critics warn this kind of private “surveillance state” lets unelected venue bosses decide who is welcome, who gets watched, and who gets punished, all without the constitutional safeguards that apply when the government itself tracks citizens.