Knicks staff click fake ring email, face mandatory security training

Two Madison Square Garden employees clicked a link in a fake email offering free championship rings, triggering a mandatory cybersecurity class for the staff.

The New York Times reported on Thursday that the New York Knicks organization sent the simulated phishing message in late September. The email carried the subject line, 'Congratulations, your Employee Championship Ring is here.' It instructed recipients to click a link to select between two ring designs. Team sources told the newspaper that anyone who clicked the link was required to attend the training session.

The exercise was designed to address growing concerns about cybersecurity held by James Dolan. Dolan owns the Knicks, the New York Rangers, and Madison Square Garden. Large companies frequently use simulated phishing messages to identify employees who overlook warning signs in suspicious emails. These tests often appear to come from the employer itself but include subtle clues. For example, Condé Nast, the parent company of Ars Technica, sends test messages from an address with a misspelled domain, 'condenest.com.' It is unclear if the Knicks email contained similar red flags, such as a misspelled domain.

Joe Vardon, a senior NBA writer for The Athletic, noted that the offer was not far-fetched. Most NBA team employees typically receive rings, even if their versions are less elaborate or costly than the players' rings. The Athletic was acquired by The New York Times in 2022 and later merged into the parent news organization. The lure carried extra weight because the Knicks won their first NBA championship in more than 50 years.

Staff members could be forgiven for being fooled or irritated by a fake offer tied to that milestone. Vardon’s article also covered a separate ring-related episode. On Tuesday, the Knicks raised their first league championship banner since 1973. During the ceremony, the team's assistant coaches were handed boxes that did not contain rings. They are expected to receive their rings at a later date.