Leaked MSG Files Reveal Guest Risk Scores and Sensitive Labels

Subway station platform with directional signs overhead.

Leaked files suggest Madison Square Garden quietly labeled guests by sexuality and “risk” level, raising fresh fears that America’s biggest arenas are quietly acting like private intelligence agencies.

Story Snapshot

Hackers leaked a Madison Square Garden database that tagged hundreds of celebrities and guests, including an explicit “LGBTQIA” label.
The database dates back to 2020 and includes risk scores, social media “concerns,” and notes about people seeking free tickets, far beyond basic safety checks.
Fans are suing after data on about 26 million people was exposed, saying the leak grew out of an aggressive surveillance culture inside the Garden.
Madison Square Garden denies targeting gay or trans people and insists its surveillance is for security, but it has not publicly explained the leaked tags.

What The Leak Shows About Madison Square Garden’s Secret Lists

Hackers known as ShinyHunters say they stole about 45 gigabytes of internal data from Madison Square Garden Sports, and posted much of it online. A review by tech outlets found a “talent” database that tracks hundreds of celebrities, famous Knicks superfans, and even guests from Taylor Swift’s wedding, with fields for “claim to fame,” contact details, and custom labels. Among these labels are “DO NOT,” different “risk” levels, and an explicit “LGBTQIA” tag attached to at least 93 entries, including well-known artists.

Metadata from the leaked files shows the talent database has been in use since at least December 2020 and was still being updated in mid‑2024, pointing to a long‑running surveillance system rather than a short‑term project. A source familiar with Garden security told WIRED that staff scan social media to find people asking for free tickets and then log “SM concerns” in the database. Physical safety threats, that source said, are kept in a separate system, suggesting this talent list is more about reputation and control than crowd protection.

From Facial Recognition To Risk Scores: How Deep The Surveillance Goes

The leak also showed a much larger customer file drawn from Madison Square Garden’s Salesforce system, with more than 10.5 million entries and almost 10 million unique email addresses tied to staff and fans. According to breach trackers, this trove included birth dates, phone numbers, and extensive relationship data linking people to tickets and events. Another report described facial recognition logs from years of scanning every face that entered Dolan‑owned venues, from the Garden to Radio City Music Hall and the Las Vegas Sphere.

Madison Square Garden has already used facial recognition to ban lawyers whose firms are suing the company, saying the technology helps “identify potential security threats” and rule‑breakers. Critics see something different: a private owner turning cutting‑edge surveillance into a tool to punish enemies or filter who gets to enjoy public‑facing spaces. Now, with the leaked celebrity tags and risk scores, privacy advocates argue the Garden has crossed another line by quietly sorting people based on sexuality, gender identity, and public image.

Disputed Targeting Of LGBTQ Guests And The Bigger Trust Problem

A former Madison Square Garden security staffer told reporters that a trans woman named Nina Richards was tracked for roughly two years inside Dolan’s venues, including notes on where she sat and when she ordered drinks, allegedly because of her gender identity. WIRED says a 2025 lawsuit by a former guard backs up claims of obsessive monitoring of Richards’ movements in arenas that are supposed to be open to all. LGBTQ advocates warn that such watch lists can easily become tools for quiet discrimination even if they are sold as “risk management.”

Madison Square Garden has assigned labels to roughly 400 celebrities, Knicks superfans, and Taylor Swift wedding guests, which include sexual orientation and risk level, as part of its 39,539-person VIP database.

A Boogie Wit da Hoodie: High Risk
Adam Pally: Do Not Host
Anna… pic.twitter.com/ZIgUTPaEp1

— Front Office Sports (@FOS) July 9, 2026

Madison Square Garden’s lawyers strongly deny these claims, calling some stalking allegations “fabricated” and describing recent reporting as “false, misleading, unverified.” The company says its surveillance programs focus on violent fans and rule breakers, not on targeting gay or trans people. Still, executives have not publicly walked through the leaked data to explain why an “LGBTQIA” tag exists at all, how risk scores are set, or what real‑world decisions those labels drive. That silence leaves courts and the public to guess at the line between safety and profiling.

Why This Fight Over One Arena Matters For Everyone

Security experts say big venues are under pressure to prevent attacks and manage huge crowds, and that cameras and analytics can help. But studies also show a trend where data tools shift from simply protecting people to tracking behavior, collecting marketing data, and deciding who is welcome. The Garden leak fits that pattern: millions of records, biometric scans, and tags tied to sexuality or social media presence, all kept by a private company that answers mainly to its owner.

For many Americans, this story blends left and right frustrations into one warning sign. Conservatives see another powerful institution hoarding data on ordinary citizens while claiming it is for “security.” Liberals see vulnerable groups, including queer and trans fans, quietly placed on lists that can shape access to public culture. Both sides worry that elites and corporate lawyers will dodge real accountability. In a country built on equal treatment and open public life, a secret “risk list” inside the nation’s most famous arena feels less like safety and more like a test of how much control over our lives we are willing to hand to the deep state of private power.