The Metropolitan Entertainment & Convention Authority Listed by Dark Project Ransomware Group

On August 05, 2026, the Dark Project ransomware group listed the Metropolitan Entertainment & Convention Authority (MECA) on its leak site, claiming the Omaha-based organization suffered a cyberattack in which more than 500 GB of confidential information was stolen. The group asserts that roughly 100,000 files containing customer data, financial documents, and employee personal information are now in its possession. As of this writing, MECA has not issued a public confirmation or breach notification.

Leak Site Claim Details

The Dark Project leak-site listing states that it successfully compromised MECA’s systems and exfiltrated over 500 GB of data. According to the posting, the stolen material includes customer records, important financial documents, and the personal data of the organization’s employees. The group has published a sample of the allegedly stolen files and threatens to release the full archive if its demands are not met. Because this information originates solely from the ransomware group’s own leak site via Ransomfeed, it remains an unconfirmed claim. MECA has not, as of this publication, publicly acknowledged the incident or provided details on what, if anything, was taken.

Why This Matters for You and Your Family

MECA operates major public venues in Omaha including the CHI Health Center, Charles Schwab Field, and The RiverFront. If you have attended concerts, sports events, conventions, or other gatherings at these locations, your name, contact information, payment details, or other records may be among the data the group claims to hold. Even when exact record counts are unknown, the exposure of customer and employee personal information from a public venue operator can affect thousands of Nebraska families. A single leaked record is often enough to fuel identity theft, phishing campaigns, or fraudulent loan applications in your name.

Doxxing and Identity-Chain Risks

When customer and employee data from an organization like MECA is leaked, attackers rarely stop at the initial dataset. Names, emails, phone numbers, and home addresses can be cross-referenced with gaming accounts, social-media handles, and data-broker profiles to build complete identity chains. A child’s gaming username tied to a parent’s leaked email from a ticket purchase can quickly escalate into full doxxing. Public reporting on similar incidents shows these chains frequently lead to swatting, harassment, or targeted scams against households. The fact that MECA’s venues serve the broader community means the blast radius extends well beyond direct employees.