Hacking and extortion group ShinyHunters published data it claims was stolen from Madison Square Garden in June 2026, according to reporting by 404 Media. The alleged leak — totaling approximately 45GB across millions of records — appeared shortly after the New York Knicks won their first NBA championship since 1973.
The published files purportedly contain personal information from MSG customers and references to Knicks players and coaches. A sample reviewed by 404 Media included one file listing names of “talent,” including Knicks members. Alleged stolen emails in the data included at least one customer complaint about face recognition technology. MSG did not respond to requests for comment. Following the story, a federal class action lawsuit was filed over the alleged breach.
ShinyHunters has claimed a string of high-profile victims in recent months, including education technology firm Instructure — whose breach disrupted thousands of schools — photography company Kodak, and a European human rights organization. WIRED has previously reported on MSG’s extensive use of surveillance technologies, including face recognition systems.
Elsewhere in security and privacy news this week, Meta was found to be testing face-recognition software built by Rank One, a supplier to the U.S. military and regional police departments, as the company explores adding the technology to its smart glasses. Separately, at least three bars in San Francisco’s Castro district were reported to be using face scanners from ID verification company Patronscan to collect customers’ facial images, names, and genders — with behavioral records shareable across a “safety network” of other businesses using the same technology.
In Europe, France’s domestic intelligence agency, the DGSI, announced in 2026 it would stop using Palantir’s data and AI tools, replacing them with software from French firm ChapsVision. Germany’s intelligence agency BfV made the same switch last month. French Prime Minister Sébastien Lecornu cited the need for domestically developed tools, stating: “We cannot rely on tools developed by foreign powers.”
Finally, Apple is set to change the domain used by its Hide My Email privacy service from @icloud.com to @private.icloud.com. The change, reported by TechCrunch, could make it easier for websites to detect when users are employing the privacy tool and require them to sign up with a different address instead.
Source: WIRED