[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8N4hupkuGJyEuy3jrCgvOo5ukE2i5xHNUSVNnShEqaA":3},{"article":4,"iocs":44,"watch_terms":45,"solutions":46,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"e6bf4aa6-dc5e-4253-ae43-9df7e2adb97c","Madison Square Garden Kept a List of Gay Celebrities","madison-square-garden-kept-a-list-of-gay-celebrities-962a89","An MSG database tracked and categorized hundreds of celebs, famous Knicks superfans, and even some of Taylor Swift’s wedding guests. Labels included “LGBTQIA,” “DO NOT HOST,” and low to high “risk.”","A massive database containing information on nearly 40,000 VIPs, including celebrities and guests, was leaked by the hacker collective ShinyHunters. The database, reportedly used by Madison Square Garden, included risk scores and categorizations like 'LGBTQIA' and 'DO NOT HOST' for hundreds of individuals, raising privacy concerns.","Madison Square Garden's VIP database, leaked by hackers, revealed risk scores for celebrities.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fmadison-square-garden-celebrity-database-surveillance\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6a4ebea5d12b964679cc8443\u002Fmaster\u002Fpass\u002F070826-MSG-database-3.jpg","2026-07-09T10:00:00+00:00","2026-07-09T12:00:07.076329+00:00",7,[17,20,23],{"name":18,"type":19},"Madison Square Garden","vendor",{"name":21,"type":22},"ShinyHunters","threat_actor",{"name":24,"type":25},"talent database","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":26,"icon":28,"name":29,"slug":30},null,"Breaches","breaches",[32,34,39],{"category":33},{"id":26,"icon":28,"name":29,"slug":30},{"category":35},{"id":36,"icon":28,"name":37,"slug":38},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,24],{"controls":47,"vendors":129},[48,77,103],{"slug":49,"name":50,"problem":51,"products":52},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[53,61,69],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"orca-security","Orca Security","\u002Fvendor-logos\u002Forca-security.png","orca-cloud-security-platform","Orca Cloud Security Platform","https:\u002F\u002Forca.security\u002Fplatform\u002F","Agentless cloud security platform for posture, vulnerabilities and data exposure.",{"slug":78,"name":79,"problem":80,"products":81},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[82,90,95],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":91,"product_name":92,"url":93,"description":94},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"slug":104,"name":105,"problem":106,"products":107},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":125,"product_name":126,"url":127,"description":128},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":146},"msg-vip-database-leak-exposes-sensitive-personal-categorizations","MSG VIP Database Leak Exposes Sensitive Personal Categorizations","Madison Square Garden maintained a database of nearly 40,000 VIPs containing highly sensitive personal attributes — including sexual orientation labels and blacklist designations — that were subsequently leaked by the ShinyHunters hacker collective. The root failure lies in the collection and storage of sensitive personal data categories (such as LGBTQIA+ status) that carry significant legal and ethical implications, combined with insufficient access controls that allowed the database to be exfiltrated. Collecting this type of sensitive data without a clear legal basis violates foundational data minimization and purpose limitation principles enshrined in major privacy regulations. Beyond the breach itself, the mere existence of such categorizations represents an organizational policy failure, as tracking individuals' sexual orientation for risk-scoring purposes is both ethically harmful and legally precarious in many jurisdictions.",[135,136,137,138,139,140,141,142,143,144,145],"GDPR Article 5 – Data Minimization and Purpose Limitation","GDPR Article 9 – Processing of Special Categories of Personal Data","GDPR Article 25 – Data Protection by Design and by Default","CCPA Section 1798.100 – Consumer Right to Know","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 MP-3 – Media Marking and Handling","NIST Privacy Framework PR.DS-P1 – Data Minimization","CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","ISO\u002FIEC 27701 – Privacy Information Management","ITIL – Information Security Management (data classification practices)",{}]