Madison Square Garden Sports (MSGS) Risk Factors

We incurred an operating loss of approximately $78 million in fiscal year 2021. In addition, we have, in prior periods, incurred adjusted operating losses and negative cash flow and there can be no assurance that we will not incur operating losses, adjusted operating losses or negative cash flow again in the future. Significant operating losses may limit our ability to raise necessary financing, or to do so on favorable terms, as such losses will likely be considered by potential investors, lenders and the organizations that issue investment ratings on indebtedness. See "Part II - Item 7. Management's Discussion and Analysis of Financial Condition and Results of Operations - Factors Affecting Operating Results."

Through our operations, we collect and store, including by electronic means, certain personal, proprietary and other sensitive information, including payment card information, that is provided to us through purchases, registration on our websites or mobile applications, or otherwise in communication or interaction with us. These activities require the use of online services and centralized data storage, including through third-party service providers. Data maintained in electronic form is subject to the risk of security incidents, including breach, compromise, intrusion, tampering, theft, destruction, misappropriation or other malicious activity. The increased use of mobile and cloud technologies heightens these and other operational risks, as do hybrid work arrangements. Our ability to safeguard such personal and other sensitive information, including information regarding the Company and our customers, sponsors, partners and employees, independent contractors and vendors, is important to our business. We take significant steps to protect our stored information, including the implementation of systems and processes to thwart malicious activity. These protections are costly and require ongoing monitoring and updating as technologies change and efforts to overcome security measures become more sophisticated. See "- We Are Subject to Governmental Regulation, Which Can Change, and Any Failure to Comply With These Regulations May Have a Material Negative Effect on Our Business and Results of Operations." Despite our efforts, the risks of a security incident cannot be entirely eliminated and our information technology and other systems that maintain and transmit customer, sponsor, partner, Company, employee, vendor, independent contractor, and other confidential and proprietary information may be compromised due to employee error or other circumstances such as malware or ransomware, viruses, hacking and phishing attacks, denial-of-service attacks, business email compromises, or otherwise. A compromise could affect the security of information on our network, or that of a third-party service provider, including MSG Entertainment or our vendors' systems to which we outsource information technology services, including technology relating to season ticket holders and purchases of individual game tickets, and certain payment processing. For example, in November 2016, a payment card issue that affected cards used at merchandise and food and beverage locations at several MSG Entertainment's venues, including The Garden, was identified and addressed with the assistance of security firms. The issue was promptly fixed and enhanced security measures were implemented. Additionally, outside parties may attempt to fraudulently induce employees, vendors or users to disclose sensitive, proprietary or confidential information in order to gain access to data and systems. Given the increasing sophistication of bad actors and complexity of the techniques used to obtain unauthorized access or disable systems, a security incident could potentially persist for an extended period of time before being detected. We may not be able to anticipate the incident or respond adequately or timely, and the extent of a particular incident, and the steps that we may need to take to investigate the incident, may not be immediately clear. As a result, our or our customers' or affiliates' sensitive, proprietary and/or confidential information may be lost, disclosed, accessed or taken without consent. See "- Economic and Business Relationship Risks - We Rely on Affiliated Entities' Performance, Including Performance of Financial Obligations, Under Various Agreements" for a discussion of services MSG Entertainment performs on our behalf. We also continue to review and enhance our security measures in light of the constantly evolving techniques used to gain unauthorized access to networks, data, software and systems. We have expended, and expect to continue to expend, significant expenses on an ongoing basis in order to review and enhance our security measures and to address any actual or potential security incidents that arise, but these measures may be ineffective and we may be subject to legal or regulatory action, as well as financial losses, and we may not have insurance coverage for any or all such losses. If we experience an actual or perceived security incident, our ability to conduct business may be interrupted or impaired, we may incur damage to our systems, we may lose profitable opportunities or the value of those opportunities may be diminished and we may lose revenue as a result of unlicensed use of our intellectual property. Unauthorized access to or security breaches of our systems could result in the loss of data, loss of business, severe reputational damage adversely affecting customer or investor confidence, diversion of management's attention, regulatory investigations and orders, litigation, indemnity obligations, damages for contract breach, penalties for violation of applicable laws or regulations and significant costs for remediation that may include liability for stolen or lost assets or information and repair of system damage that may have been caused, incentives offered to customers or other business partners in an effort to maintain business relationships after a breach and other liabilities. In addition, in the event of a security incident, changes in legislation may increase the risk of potential litigation. For example, the CCPA, which provides a private right of action (in addition to statutory damages) for California residents whose sensitive personal information is breached as a result of a business' violation of its duty to reasonably secure such information, took effect on January 1, 2020 and was expanded by the CPRA, which took effect in January 2023. A number of other states have passed similar laws and additional states may do so in the near future. Our insurance coverage may not be adequate to cover the costs of a data breach, indemnification obligations, or other liabilities. We also routinely transmit and receive personal, confidential and proprietary information by email and other electronic means. We have discussed and worked with customers, sponsors, partners, employees, directors, independent contractors and vendors to secure transmission capabilities and protect against cyber incidents, but we do not have, and may be unable to put in place, secure capabilities with all of our customers, sponsors, partners, employees, directors, independent contractors and vendors and we may not be able to ensure that these third parties have appropriate controls in place to protect the confidentiality of the information. An interception, misuse or mishandling of personal, confidential or proprietary information being sent to or received from a client, vendor, service provider, counterparty or other third party could result in legal liability, regulatory action and reputational harm. In addition, new regulations require us to disclose information about material cybersecurity incidents on a timely basis, including those that may not have been resolved or fully investigated at the time of disclosure, or, in some instances, we may have obligations to notify relevant stakeholders of security breaches. Such mandatory disclosures are costly, could provide information to bad actors, could lead to negative publicity, may cause our customers to lose confidence in the effectiveness of our security measures and may require us to expend significant capital and other resources to respond to or alleviate problems caused by an actual or perceived security breach.

Cloud computing services provide a distributed computing infrastructure platform for our business operations. We have established our software and computer systems so as to utilize data processing, storage capabilities and other services provided by third parties. Those third parties' facilities are vulnerable to damage or interruption from, among other things, design defects, the age of the technology, network failures, technology modernization initiatives, malfunctions in maintenance updates or security patches, natural disasters, cybersecurity attacks, terrorist attacks, power outages and similar events or acts of misconduct. We have experienced, and we expect that in the future we will experience, interruptions, delays and outages in service and availability from third-party service providers from time to time due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. Given this, along with the fact that we cannot easily switch our cloud operations to another cloud provider, without significant costs, or at all, any disruption of or interference with our use of cloud providers would impact our operations and our business.

Our business depends upon the ability and willingness of consumers and businesses to purchase tickets (including season tickets) to our games, license suites at The Garden, spend on food and beverages and merchandise and drive continued advertising and sponsorship revenues, and these revenues are sensitive to general economic conditions and consumer buying patterns. Consumer and corporate spending has in the past declined and may in the future decline at any time for reasons beyond our control. The risks associated with our businesses may become more acute in periods of a slowing economy or recession, which may lead to reductions in, among other things, corporate sponsorship and advertising and decreases in attendance at live sports events, demand for suite licenses and food and beverage and merchandise sales, some of which we have experienced in the past and may experience in the future. In addition, inflation, which has significantly risen, has increased and may continue to increase operational costs, and continued increases in interest rates in response to concerns about inflation may have the effect of further increasing economic uncertainty and heightening these risks. As a result, instability and weakness of the U.S. and global economies, disruptions to financial markets, inflation, recession, high unemployment, reduced tourism and other geopolitical events, including another outbreak similar to the COVID-19 pandemic, and the resulting negative effects on consumers' and businesses' discretionary spending have in the past materially negatively affected, and may in the future materially negatively affect, our business and results of operations.

Our revenues and expenses have been seasonal and we expect they will continue to be seasonal. Due to the NBA and NHL playing seasons, revenues from our business are typically concentrated in the second and third quarters of each fiscal year. Disruptions due to COVID-19 impacted the seasonality of our business and other disruptions could impact the seasonality of our business in the future. For example, as a result of the delayed start of the 2020-21 NBA and NHL regular seasons due to COVID-19, certain of our revenues and expenses were recognized during the third and fourth quarters of fiscal year 2021 that otherwise typically would have been recognized during the second and third quarters. As a result of seasonality, our operating results and cash flows reflect significant variation from period to period and will continue to do so in the future. Therefore, period-to-period comparisons of our operating results or cash flows may not necessarily be meaningful and the operating results or cash flows of one period are not indicative of our financial performance during a full fiscal year.