Madison Square Garden Sports (MSGS) Risk Analysis

We incurred a net loss of approximately $22.4 million in fiscal year 2025. We have, in prior periods, incurred operating losses, adjusted operating losses and negative cash flow and there can be no assurance that we will not incur net losses, operating losses, adjusted operating losses or negative cash flow again in the future. Significant operating losses may limit our ability to raise necessary financing, or to do so on favorable terms, as such losses will likely be considered by potential investors, lenders and the organizations that issue investment ratings on indebtedness. See "Part II - Item 7. Management's Discussion and Analysis of Financial Condition and Results of Operations - Factors Affecting Operating Results."

Through our operations, we collect and store, including by electronic means, certain personal, proprietary and other sensitive information, including payment card information, that is provided to us through purchases, registration on our websites or mobile applications, or otherwise in communication or interaction with us. These activities require the use of online services and centralized data storage, including through third-party service providers. Data maintained in electronic form is subject to the risk of security incidents, including breach, compromise, intrusion, tampering, theft, destruction, misappropriation or other malicious activity. The increased use of mobile and cloud technologies heightens these and other operational risks, as do hybrid work arrangements. The rapid development and increased availability of advanced artificial intelligence technologies may further heighten these risks by increasing the speed, scale and sophistication of cyber threats and making security vulnerabilities easier to identify and exploit. Our ability to safeguard such personal and other sensitive information, including information regarding the Company and our customers, sponsors, partners and employees, independent contractors and vendors, is important to our business. We take significant steps to protect our stored information, including the implementation of systems and processes to thwart malicious activity. These protections are costly and require ongoing monitoring and updating as technologies change and efforts to overcome security measures become more sophisticated. See "- We Are Subject to Governmental Regulation, Which Can Change, and Any Failure to Comply With These Regulations May Have a Material Negative Effect on Our Business and Results of Operations." Despite our efforts, the risks of a security incident cannot be entirely eliminated and our information technology and other systems that maintain and transmit customer, sponsor, partner, Company, employee, vendor, independent contractor, and other confidential and proprietary information may be compromised due to employee error or other circumstances such as malware or ransomware, viruses, hacking and phishing attacks, denial-of-service attacks, business email compromises, or otherwise. Advanced artificial intelligence tools may also increase the likelihood and speed of successful cyberattacks or the misuse or inadvertent exposure of sensitive, proprietary or confidential information. A compromise could affect the security of information on our network, or that of a third-party service provider, including MSG Entertainment or our vendors' systems to which we outsource information technology services, including technology relating to season ticket holders and purchases of individual game tickets, and certain payment processing. For example, we receive certain information technology services from MSG Entertainment under our services agreement, and in December 2025, MSG Entertainment identified and, with the assistance of a security firm, has taken measures to address a security incident involving MSG Entertainment's Oracle E-Business Suite Enterprise Resource Planning system, which we utilize. The incident resulted from an Oracle system vulnerability that was exploited by a threat actor that targeted hundreds of companies using Oracle E-Business Suite. The Oracle E-Business Suite instance we utilize is hosted on a server that is managed by a third-party and the Company's network was not involved in the incident. We determined that this breach was not material to our business and results of operations. Additionally, outside parties may attempt to fraudulently induce employees, vendors or users to disclose sensitive, proprietary or confidential information in order to gain access to data and systems. Given the increasing sophistication of bad actors and complexity of the techniques used to obtain unauthorized access or disable systems, a security incident could potentially persist for an extended period of time before being detected. We may not be able to anticipate the incident or respond adequately or timely, and the extent of a particular incident, and the steps that we may need to take to investigate the incident, may not be immediately clear. As a result, our or our customers' or affiliates' sensitive, proprietary and/or confidential information may be lost, disclosed, accessed or taken without consent. See "- Economic and Business Relationship Risks - We Rely on Affiliated Entities' Performance, Including Performance of Financial Obligations, Under Various Agreements" for a discussion of services MSG Entertainment performs on our behalf. We also continue to review and enhance our security measures in light of the constantly evolving techniques used to gain unauthorized access to networks, data, software and systems. We have expended, and expect to continue to expend, significant expenses on an ongoing basis in order to review and enhance our security measures and to address any actual or potential security incidents that arise, but these measures may be ineffective and we may be subject to legal or regulatory action, as well as financial losses, and we may not have insurance coverage for any or all such losses. If we experience an actual or perceived security incident, our ability to conduct business may be interrupted or impaired, we may incur damage to our systems, we may lose profitable opportunities or the value of those opportunities may be diminished and we may lose revenue as a result of unlicensed use of our intellectual property. Unauthorized access to or security breaches of our systems could result in the loss of data, loss of business, severe reputational damage adversely affecting customer or investor confidence, diversion of management's attention, regulatory investigations and orders, litigation, indemnity obligations, damages for contract breach, penalties for violation of applicable laws or regulations and significant costs for remediation that may include liability for stolen or lost assets or information and repair of system damage that may have been caused, incentives offered to customers or other business partners in an effort to maintain business relationships after a breach and other liabilities. In addition, in the event of a security incident, changes in legislation may increase the risk of potential litigation. For example, the CCPA (as expanded by the CPRA) provides a private right of action (in addition to statutory damages) for California residents whose sensitive personal information is breached as a result of a business' violation of its duty to reasonably secure such information. Numerous other states have passed similar laws and additional states may do so in the near future. Our insurance coverage may not be adequate to cover the costs of a data breach, indemnification obligations, or other liabilities. We also routinely transmit and receive personal, confidential and proprietary information by email and other electronic means. We have discussed and worked with customers, sponsors, partners, employees, directors, independent contractors and vendors to secure transmission capabilities and protect against cyber incidents, but we do not have, and may be unable to put in place, secure capabilities with all of our customers, sponsors, partners, employees, directors, independent contractors and vendors and we may not be able to ensure that these third parties have appropriate controls in place to protect the confidentiality of the information. An interception, misuse or mishandling of personal, confidential or proprietary information being sent to or received from a client, vendor, service provider, counterparty or other third party could result in legal liability, regulatory action and reputational harm. In addition, we are required to disclose information about material cybersecurity incidents on a timely basis, including those that may not have been resolved or fully investigated at the time of disclosure, or, in some instances, we may have obligations to notify relevant stakeholders of security breaches. As the regulatory environment and disclosure expectations relating to cybersecurity and artificial intelligence continue to evolve, we may face additional governance, transparency and regulatory challenges, including an increased risk that our controls, practices or disclosures are viewed as insufficient or misleading. Such mandatory disclosures are costly, could provide information to bad actors, could lead to negative publicity, may cause our customers to lose confidence in the effectiveness of our security measures and may require us to expend significant capital and other resources to respond to or alleviate problems caused by an actual or perceived security breach.

Cloud computing services provide a distributed computing infrastructure platform for our business operations. We have established our software and computer systems so as to utilize data processing, storage capabilities and other services provided by third parties. Those third parties' facilities are vulnerable to damage or interruption from, among other things, design defects, the age of the technology, network failures, technology modernization initiatives, malfunctions in maintenance updates or security patches, natural disasters, cybersecurity attacks, terrorist attacks, power outages and similar events or acts of misconduct. We have experienced, and we expect that in the future we will experience interruptions, delays and outages in service and availability from third-party service providers from time to time due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. Given this, along with the fact that we cannot easily switch our cloud operations to another cloud provider, without significant costs, or at all, any disruption of or interference with our use of cloud providers would impact our operations and our business.

Our revenues and expenses have been seasonal and we expect they will continue to be seasonal. Due to the NBA and NHL playing seasons, revenues from our business are typically concentrated in the second and third quarters of each fiscal year. As a result of seasonality, our operating results and cash flows reflect significant variation from period to period and will continue to do so in the future. Therefore, period-to-period comparisons of our operating results or cash flows may not necessarily be meaningful and the operating results or cash flows of one period are not indicative of our financial performance during a full fiscal year.

If the Rangers Distribution occurs, we expect to enter into various agreements with Spinco, including a distribution agreement, a contribution agreement, a tax disaffiliation agreement, a transition services agreement under which each company will provide specified services to the other, an employee matters agreement, a group ticket sales services agreement under which Spinco will act as the Company's sales and service representative and a lease agreement for the Madison Square Garden Training Center. We also expect to establish aircraft arrangements and to enter into a sponsorship allocation agreement with Spinco, MSG Entertainment and Sphere Entertainment. These agreements will govern our relationship with Spinco subsequent to the Rangers Distribution and will provide for the allocation of employee benefits, taxes and certain other liabilities and obligations attributable to periods prior to the Rangers Distribution. These agreements will also include arrangements with respect to transition services and a number of on-going commercial relationships. Under the distribution agreement we will provide Spinco with indemnities with respect to liabilities arising out of our businesses and Spinco will provide us with indemnities with respect to liabilities arising out of the businesses we will transfer to Spinco. We and Spinco will each rely on the other to perform its obligations under all of these agreements. If Spinco were to breach or to be unable to satisfy its material obligations under these agreements, including a failure to satisfy its indemnification or other financial obligations, we could suffer operational difficulties and/or significant losses.

Our business depends upon the ability and willingness of consumers and businesses to purchase tickets (including season tickets) to our games, license suites at The Garden, spend on food and beverages and merchandise and drive continued advertising and sponsorship revenues, and these revenues are sensitive to general economic conditions, recessions, fears of recessions and consumer behavior, including due to the impacts of tariffs. Consumer and corporate spending have in the past declined and may in the future decline at any time for reasons beyond our control. The risks associated with our businesses may become more acute in periods of a slowing economy or recession, which may lead to reductions in, among other things, corporate sponsorship and advertising and decreases in attendance at live sports events, demand for suite licenses and food and beverage and merchandise sales, some of which we have experienced in the past and may experience in the future. In addition, inflation, which has risen significantly in recent years, has resulted in and may continue to result in increased operational costs. Volatility in, and uncertainty regarding inflation rates, as well as continued elevated interest rates in response to concerns about inflation may have the effect of further increasing economic uncertainty and heightening these risks. As a result, instability and weakness of the U.S. and global economies, disruptions to financial markets, inflation, recession, high unemployment, the imposition of tariffs, reduced tourism and other geopolitical events, including another outbreak similar to the COVID-19 pandemic, and the resulting negative effects on consumers' and businesses' discretionary spending have in the past materially negatively affected, and may in the future materially negatively affect, our business and results of operations.