INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Oracle EBS 2025 campaign leaks sensitive data at Madison Square

| 2026-03-03 15:42 CRITICAL HIGH DATA BREACH
JSON
Executive Summary
AI-generated
On March 3, 2026, Madison Square Garden was affected by a data breach linked to the 2025 Oracle E-Business Suite hacking campaign. The Cl0p ransomware group exploited zero-day flaws in Oracle's application to access sensitive information from over 100 organizations, including MSG. The incident involved leaked more than 210GB of archived files containing business records related to hiring or payments made to individuals, exposing personal data such as names and Social Security numbers. The attack works by exploiting a critical vulnerability tracked as CVE-2025-61882 (CVSS 9.8) in the Oracle E-Business Suite, allowing unauthenticated remote attackers to take control of the system. As of now, Madison Square Garden has notified affected individuals and offered complimentary credit monitoring services through Cyberscout to help detect misuse of personal information.
Technical Mitigations AI-generated
• Apply the Oracle EBS 2025 patch (CVE-2025-61882) to prevent exploitation of the critical vulnerability. • Monitor for suspicious activity related to the Cl0p ransomware group, such as unusual login attempts or data access patterns. • Use a reputable credit monitoring service like Cyberscout to detect potential misuse of personal information.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
CVE-2025-61882CVE-2025-61882
Target & Sectors
Global Scope
Incident Timeline
‎November 2025
Threat actors leaked more than 210GB of Madison Square Garden's archived files, exposing sensitive information.
data_breach 210 GB
MSG refused to pay the ransom, then the extortion group leaked more than 210GB of the company’s archived files, exposing sensitive information.
‎December 2025
Threat actors exploited the CVE-2025-61882 vulnerability in Oracle EBS 2025 to target Madison Square Garden, resulting in a leak of sensitive data.
infrastructure 9.8
In October 2025, Oracle released an emergency patch to address a critical vulnerability, tracked as CVE-2025-61882 (CVSS 9.8) in its E-Business Suite.
‎2026/03/03
The 2025 Oracle EBS hacking campaign, led by the Cl0p ransomware group, exploited zero-day flaws to access sensitive data from over 100 organizations, including Madison Square Garden.
victims 100 organizations
In the Oracle EBS hacking campaign, the Cl0p ransomware group exploited zero-day flaws to access data from over 100 organizations, including MSG, in November 2025.
Tactical Metrics
Metrics
victims
100
Organizations
In the Oracle EBS hacking campaign, the Cl0p ransomware group exploited zero-day flaws to access data from over 100 organizations, including MSG, in November 2025.
Metrics
data_breach
210
Gb
MSG refused to pay the ransom, then the extortion group leaked more than 210GB of the company’s archived files, exposing sensitive information.
Metrics
infrastructure
​9.8
Software Version
In October 2025, Oracle released an emergency patch to address a critical vulnerability, tracked as CVE-2025-61882 (CVSS 9.8) in its E-Business Suite.
Intelligence Sources
Security Affairs 2026-03-03