{
  "type": "bundle",
  "id": "bundle--c8b33db9-132f-5e20-8fbd-4ee5179912a6",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--85838abe-e4d7-5926-8c98-3c38ef68e402",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "org:733c30cf-3978-4159-a41f-6b01fbbda5ec",
      "name": "Madison Square Garden Entertainment Corp.",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--96217992-e829-5c60-8ff1-8301fcd82de9",
      "created": "2026-08-09T07:43:33Z",
      "modified": "2026-08-09T07:43:33Z",
      "x_ally_original_id": "org:8f63031f-606c-4dac-a261-24291e2bb949",
      "name": "Madison Square Garden Sports Corp.",
      "identity_class": "organization"
    },
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--a5543ea7-f3bc-5ecf-87c0-690e06cbc482",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "org:a1ff828b-e0ae-4ee6-a9ba-c82fb31f330f",
      "name": "Sphere Entertainment Co.",
      "identity_class": "organization"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--4c975ee0-c2e3-544e-8886-b76bfce1ffd8",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "inc:a8d17b3a-9af9-4345-bdce-9cdd79e35a58",
      "name": "MSG family vendor-hosted Oracle E-Business Suite compromise"
    },
    {
      "type": "incident",
      "spec_version": "2.1",
      "id": "incident--e059837f-1883-5ce3-831c-e4b3770b19be",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "brh:5511c7b9-5c09-4a99-bcf5-acb97a7bf249",
      "name": "Madison Square Garden family Oracle E-Business Suite data breach"
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--29bf71f0-b698-5cb0-8672-7b4561b0ba61",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:65ad345c-79d5-4703-8ecf-35c17703e8cf",
      "relationship_type": "resulted-in",
      "source_ref": "incident--4c975ee0-c2e3-544e-8886-b76bfce1ffd8",
      "target_ref": "x-ally-event--7f54c3e3-aa3e-5e79-8d0a-e0f6f69d090e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:3abf6481-6229-49fe-abb3-b998662ee7b9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--3729306c-4692-58ca-8dc6-8bdb49380302",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:567d14c9-b729-4f50-bec5-3270e2da6a86",
      "relationship_type": "affected-organization",
      "source_ref": "incident--4c975ee0-c2e3-544e-8886-b76bfce1ffd8",
      "target_ref": "identity--96217992-e829-5c60-8ff1-8301fcd82de9",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:87ad0174-d13d-438d-8528-4321cdec5bed",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--5d5552da-4037-5b84-8793-83360bd90f0e",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:3fe342b0-65cd-46d1-9caf-b0c5fd57b3c5",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--2e8c200b-d594-5f8b-820f-89bf7673f480",
      "target_ref": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:581ea519-b4df-40a7-b30a-0c099ec15cb9",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--9dbee7d3-9dec-5f8f-8712-2ef9a9b170fd",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:a7d19fac-a119-41ce-8117-48d040b99ca5",
      "relationship_type": "resulted-in",
      "source_ref": "incident--4c975ee0-c2e3-544e-8886-b76bfce1ffd8",
      "target_ref": "x-ally-data-exposure--2e8c200b-d594-5f8b-820f-89bf7673f480",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:37353d6b-88b2-453a-8956-c5e4a76740ba",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--a59fb446-7267-58fd-82af-8ac1d6aa7151",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:95068f8e-4ccc-45d2-bda3-cad5a11e55b6",
      "relationship_type": "affected-organization",
      "source_ref": "incident--4c975ee0-c2e3-544e-8886-b76bfce1ffd8",
      "target_ref": "identity--a5543ea7-f3bc-5ecf-87c0-690e06cbc482",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:eb7b195a-5df5-4efb-9619-e851f597b640",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--ace7a637-8ac4-592e-860c-282cb6431cc8",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:ace91641-b681-42c3-91ac-90aaa093a8d5",
      "relationship_type": "affected-organization",
      "source_ref": "incident--4c975ee0-c2e3-544e-8886-b76bfce1ffd8",
      "target_ref": "identity--85838abe-e4d7-5926-8c98-3c38ef68e402",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:0674af61-2613-4c04-824e-f7f17a8b7fd3",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ]
    },
    {
      "type": "relationship",
      "spec_version": "2.1",
      "id": "relationship--eb77b59f-b7f8-59f9-85aa-158ff190c824",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:b6355203-3f83-4f64-af26-39efa0d9c135",
      "relationship_type": "exposed-data-category",
      "source_ref": "x-ally-data-exposure--2e8c200b-d594-5f8b-820f-89bf7673f480",
      "target_ref": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:2eda71d0-d83d-4ccb-b2d2-227572c1cd78",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ]
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--1dbf66e7-fbc3-519b-80dd-720b6cad0ac8",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:27b55ccf-b732-479b-9a2e-67f35dc5c39f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:f31cd551-b2dc-4591-91e9-d7fa09dad335",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The investigation determined the unauthorized access in late November 2025; the group identified an affected file containing a name and Social Security number in December."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--6ba14dee-ac2b-59cf-876b-8c309cf6f337",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:965251ea-1cb0-45ec-a080-4c4ee491b896",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:57279122-2dc4-40d7-bf0c-12ee021b8bcb",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The group confirmed its vendor implemented Oracle-recommended measures, notified law enforcement, and offered one year of credit monitoring to notice recipients."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--70d46dd0-afdd-53db-8152-e6547450da0d",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:006c2d3d-1dec-46b1-b241-58828c44fb30",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "MSGS Spinco, Inc.",
          "url": "https://www.sec.gov/Archives/edgar/data/2132873/000119312526402509/d127770dex991.htm",
          "external_id": "cit:53afb2d8-da23-43bc-9745-e75f79550e81",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:52da92ca765b3966b940087e6b702d4b4dc432c0a7be1396cde04af4b9e56883"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The Spinco filing says the Oracle instance was hosted on a third-party-managed server, MSG Sports’ network was not involved, and MSG Sports assessed the breach as not material to its business and results."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--70d5447f-d663-574e-8678-adfc2aa8ad69",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:24ac317b-9914-462d-b2b8-004f3d3f2852",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:843334e3-e52b-4ad8-92c3-1890cb6d270f",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "date",
        "value": "2026-02-23"
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--abb9ab64-f96a-50f2-8fae-56049d7cd75a",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:d83c1469-973b-4421-80be-08e630b6967f",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:5e2f8d54-69d2-4719-98b1-cf366f11c52d",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The group’s vendor-hosted Oracle eBusiness Suite supported workforce and financial operations. An unauthorized person accessed application data in August 2025."
      }
    },
    {
      "type": "x-ally-claim",
      "spec_version": "2.1",
      "id": "x-ally-claim--bfd8004a-ef3c-5481-8f53-21e0e1c703bf",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "clm:7fc28e60-3e4b-416b-b459-ca49b6a3a55e",
      "confidence": 100,
      "external_references": [
        {
          "source_name": "Madison Square Garden Family of Companies",
          "url": "https://oag.ca.gov/system/files/MSG%20-%20California%20Notification.pdf",
          "external_id": "cit:00f4fad2-3711-4457-827b-33bdbc5e1eb4",
          "x_ally_stance": "supports",
          "x_ally_snapshot_id": "snp:sha256:333b17a061d65407cb3dec31310332407acb93b704ae488a64bbb318ae570377"
        }
      ],
      "x_ally_claim_object": {
        "kind": "value",
        "datatype": "string",
        "value": "The notice attributes access to exploitation of a previously undisclosed condition in the Oracle application, without identifying a CVE."
      }
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--a2b7dd9d-0c02-5710-88ed-ea507d0ffa07",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:559cf3f5-80c7-45ba-a930-ff0bfa8d17b0",
      "name": "Names"
    },
    {
      "type": "x-ally-data-category",
      "spec_version": "2.1",
      "id": "x-ally-data-category--ab430a0e-23bc-5177-814b-26f716196ca0",
      "created": "2026-08-08T23:12:00Z",
      "modified": "2026-08-08T23:12:00Z",
      "x_ally_original_id": "dat:fcd11f98-14a8-47ac-adea-68ad2985528f",
      "name": "Social Security numbers"
    },
    {
      "type": "x-ally-data-exposure",
      "spec_version": "2.1",
      "id": "x-ally-data-exposure--2e8c200b-d594-5f8b-820f-89bf7673f480",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "exp:526da49c-dfe6-43fb-b085-a62bb8cc1bf5",
      "name": "Hiring and payment records in the Oracle application"
    },
    {
      "type": "x-ally-event",
      "spec_version": "2.1",
      "id": "x-ally-event--7f54c3e3-aa3e-5e79-8d0a-e0f6f69d090e",
      "created": "2026-10-19T17:29:03.274623+00:00",
      "modified": "2026-10-19T17:29:03.274623+00:00",
      "x_ally_original_id": "evt:f1c2b0b3-a987-4e9d-abf1-ea1b93bd3eb4",
      "name": "Group issues breach notice"
    }
  ]
}