Madison Square Garden facial recognition flags lawyers and denies entry

In late 2022, news outlets reported that Madison Square Garden Entertainment used facial‑recognition software to match attendees against an exclusion list of lawyers affiliated with firms suing the company, and several attorneys with valid tickets were turned away from events. The policy and its enforcement prompted multiple lawsuits and a formal inquiry by New York Attorney General Letitia James. Critics and lawmakers alleged the system produced wrongful exclusions and chilled legal advocacy; MSG defended the policy as a security measure.

Madison Square Garden Entertainment Corp. · Incident Dec 1, 2022 · Indexed Jun 10, 2026 · 3 sources

An automated face‑match to an exclusion list caused ticketed attendees to be identified and turned away.
What
In late 2022, news outlets reported that Madison Square Garden Entertainment used facial‑recognition software to match attendees against an exclusion list of lawyers affiliated with firms suing the company, and several attorneys with valid tickets were turned away from events.
Incident date
Dec 1, 2022
Who
Madison Square Garden Entertainment Corp.
Failure mode
Policy Violation
AI surface
Computer Vision
Severity
High

What happened

News reporting and public records show that in late 2022 Madison Square Garden Entertainment used facial‑recognition software to identify and exclude lawyers affiliated with law firms that had sued the company. Several attorneys with valid tickets were reportedly identified by the system and removed from events. The practice provoked multiple lawsuits by affected firms and an information request / inquiry from New York Attorney General Letitia James.

What broke inside the model

Failure path · mode profile · Policy Violation
  1. 01 · TriggerA prompt pushes against a deployment boundary.
  2. 02 · Model stepThe model produces the disallowed output.
  3. 03 · Control gapNo enforcement blocks it at generation time.
  4. 04 · FailureThe output crosses the policy line.
  5. 05 · ConsequenceA limit the business set is breached in public.

The output crosses a policy boundary the deployment had defined.

An automated face‑matching system was used as an access control mechanism against an exclusion list based on firm affiliation; this conflated firm association with individual involvement in litigation and led to denial of entry. The deployment lacked an effective, timely human review or appeals process for flagged patrons, producing wrongful exclusions and legal challenge.

Public visibilityHigh
Regulatory exposureActive
Customer impactMany customers
Financial impactUnknown
Time to disclosureMonths
  1. PressMadison Square Garden Uses Facial Recognition to Ban Its Owner’s Enemiesnytimes.com
  2. PrimaryAttorney General James Seeks Information from Madison Square Garden Regarding Use of Facial Recognition Technologyag.ny.gov
  3. PressMadison Square Garden uses face recognition to keep out attorneys who sued the company, New York AG sayscbsnews.com
Permalinkhttps://failureindex.ai/failures/madison-square-garden-facial-recognition-flags
CitationAI Failure Index. "Madison Square Garden facial recognition flags lawyers and denies entry" (FI-0409). Realm Labs. https://failureindex.ai/failures/madison-square-garden-facial-recognition-flags (indexed Jun 10, 2026).
Share cardA branded image of this record for posts and slides.

Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0409. Full dataset at /data.

Note from Realm Labs, the Index steward

How Realm fits

Controls for this failure mode
  • Prism
  • OmniGuard

This entry sits in the index's predictive wing: a system that scores, ranks, perceives, or steers rather than generates. Realm's runtime layer is built for the generative and agentic systems now moving into these same decision seats, where it watches a model's internal state and holds an unsupported claim or an unchecked action before it commits. The control gap on this record, an automated decision that reached people with no runtime check in front of it, is the same gap. The index keeps predictive failures on the record because the pattern carries straight into the systems shipping today.