AI Risk Wire

Cases › other › LR-2026-0517

Madison Square Garden facial recognition used to track a fan

Preliminary Why: 1 report: WIRED · subject to change · 1 independent report

Status: no action reported

Severity moderate
Reported 17 Apr 2026

No source states: loss or records, developer and model, agent tool, could do, deployer, industry.

Severity moderate: test: data of others touched with a bounded scope stated, namely tracking of one person over a two-year period.

Madison Square Garden's security team used the venue's face-recognition cameras to track Nina Richards, a pseudonym used by WIRED, a fan who attended Knicks games. Her movements were tracked, over and over, and the reporting says she was followed through the venue down to the second over a two-year period. Former staffers described her as a target, and one said she posed no threat. The tracking included a January 10, 2022 game. Richards was later banned from the Garden, and a former security officer, Donnie Ingrasselino, alleges in a lawsuit that the security chief fabricated a stalking allegation to justify it. The surveillance became public through a 2025 lawsuit and WIRED's own reporting. MSG Entertainment declined to specifically comment on the reporting.

What happened

No source tells the story step by step yet.

What was done

No source states an action or fix.

Risks

Read from the sources; not yet reviewed by a person.

Controls

Not yet read for controls. Controls that mitigate the primary risk:

Application

Data minimisation · Sensitive-data checks on outbound data · Human approval for high-impact actions · Output filtering and redaction · People told they are dealing with AI · Risk assessment per deployment

Infrastructure / target

Bot and scraping defences

Evidence

No source states: a step-by-step account, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off, what was done.

Show every field, with its source and grade

What happened

Earliest source we hold
2026-04-17
D inferred by us from the described behaviour, reason shown
What went wrong
other
D inferred by us from the described behaviour, reason shown
primary risk
RK15
D inferred by us from the described behaviour, reason shown

Impact

Severity
moderate
D inferred by us from the described behaviour, reason shown
Why this severity
test: data of others touched with a bounded scope stated, namely tracking of one person over a two-year period.
D inferred by us from the described behaviour, reason shown

Notes on gaps

The sources describe facial-recognition surveillance of a person by venue security, not an autonomous AI agent, so no agent fields or failure classes were set. The disclosure date was not recorded because no sentence in the sources states it. No remediation is reported; MSG declined to specifically comment. Most allegations come from a lawsuit and from unnamed former staff and are unproven; MSG's lawyers dispute them in court filings.

LR-2026-0517 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON