Knicks sent employees fake championship rings in phishing test
A corporate phishing simulation by the New York Knicks promised employees free championship rings before revealing the offer was a security test, as [reported] by The New York Times.
Radwan AbdulhadiEditor and technology writer
The Phishing Simulation Details
The New York Knicks organization recently sent employees an internal phishing test email promising free championship rings, as [reported] by The New York Times. Sent in late September, the email carried the subject line, 'Congratulations, your Employee Championship Ring is here,' and instructed recipients to click a link to choose between two ring designs.
Corporate phishing tests are a common method used by organizations to evaluate how well staff can spot online scams. However, using the allure of a championship ring commemorating the basketball franchise's first NBA championship in more than half a century proved to be a particularly sensitive hook for many workers.
Mandatory Cybersecurity Classes for Employees
Madison Square Garden employees who clicked the link found themselves facing immediate consequences. According to team sources cited in the coverage by [Jon Brodkin] and other outlets, staff who fell for the simulation 'were forced to attend a mandatory cybersecurity class to help satisfy some of [owner James] Dolan’s growing cybersecurity concerns.'
The email featured a graphic of two differently styled rings named Championship Gold and Garden Classic. The message informed recipients that the items were complimentary, personalized with their names, crafted by the same jeweler, and issued directly by Madison Square Garden at no cost.
Context Surrounding Actual Ring Distribution
The phishing test coincided with broader discussions regarding actual championship ring distribution within the organization. While team players, coaches, and select personnel were slated to receive genuine memorabilia, many longtime employees at Madison Square Garden and members of the Knicks' business operations were informed they would not receive rings.
Team sources confirmed that the email was indeed a security exercise. Although it remains unclear exactly how many employees clicked the link, the simulation raised hopes across the corporate staff before the true nature of the message was revealed.
Madison Square Garden Responds
Following initial reports on the incident, Madison Square Garden Sports issued an official statement addressing the simulation. The organization acknowledged that using the championship rings as a lure was 'an unfortunate mistake' designed to strengthen employee awareness against malicious hackers.
The company explained that MSG was recently targeted in a hack and extortion attempt that utilized an employee login and password obtained through a similar phishing attack, prompting the internal security test. In addition, MSG stated that it is gifting more than 275 championship rings and jewelry valued at over $3.7 million to players, coaches, employees, and other members of the Knicks family to celebrate the milestone achievement.
Sources
- Ars TechnicaKnicks sent employees fake offer of championship rings in phishing test: Report
Continue chronologically
Related stories
Wikimedia Foundation Weighs In On NYT v. OpenAI Lawsuit
The Wikimedia Foundation has filed an amicus brief in The New York Times' copyright case against OpenAI and Microsoft, urging a balanced legal approach.
OpenAI Highlights Court Briefs Supporting Fair Use in AI
OpenAI shares excerpts from court briefs by creators, academics, and legal experts highlighting how fair use supports AI training and innovation.
Wikipedia Operator Warns Bad AI Copyright Ruling Threatens Web
The Wikimedia Foundation urges a middle-ground approach in AI copyright cases, arguing training should be fair use but regurgitation requires licenses.
Microsoft filings call AI scraping ‘largest theft’
Newly unsealed filings quote Microsoft and OpenAI executives warning that AI scraping threatened publishers and could undermine fair-use claims.
