Knicks used free championship ring offer to test employees for phishing

Knicks used free championship ring offer to test employees for phishing

Add CyberWorldOpsto your preferred sources on Google
Knicks used free championship ring offer to test employees for phishing
Data Breaches

Illustrative image generated with AI

The New York Knicks organization sent employees a fake offer of complimentary championship rings in a late-September phishing exercise, according to reporting by The New York Times cited by Ars Technica. Madison Square Garden employees who clicked the link were required to attend a cybersecurity class, the report said, citing team sources.

The email presented recipients with a personalized offer and a choice between two ring designs, named Championship Gold and Garden Classic. It promised a ring made by the same jeweler, with the same craftsmanship and the employee’s name, at no cost. Recipients were instructed to follow a link to reserve their preferred design.

“Congratulations, your Employee Championship Ring is here,” the message said.

Joe Vardon, senior NBA writer for The Athletic, reported that multiple team sources confirmed the message was a phishing test. His reporting linked the mandatory training to growing cybersecurity concerns held by James Dolan, who owns the Knicks, New York Rangers and Madison Square Garden.

The lure drew on a plausible employee benefit. Vardon noted that NBA team employees typically receive championship rings, although their versions may be less elaborate and expensive than those given to players. The email also arrived ahead of the Knicks raising their first league championship banner since 1973.

The exercise emerged in Vardon’s reporting about ring distribution. Knicks assistant coaches received empty ring boxes during the banner ceremony and were told their rings would arrive later. Team sources said many longtime Madison Square Garden employees, including some in the Knicks’ business operations, would receive no rings.

The number of employees who clicked the phishing-test link was not disclosed. It also remained unclear whether any recipients of the email would eventually receive a championship ring.

Read next

Sources

This article is an original reworking based on the sources below.

Back to home

Latest Cybersecurity News

All cybersecurity news →