Two Knicks employees click fake ring link, triggering mandatory security training

Two Madison Square Garden employees clicked a link in a deceptive email offering free championship rings, according to a report by The New York Times. The message was sent by the New York Knicks organization in late September as a test to measure staff awareness of digital scams. The subject line read, "Congratulations, your Employee Championship Ring is here," and instructed recipients to select from two ring designs.

The two employees who interacted with the link were required to attend a mandatory cybersecurity class. The training session was designed to address growing concerns regarding data security held by James Dolan, the owner of the Knicks, the New York Rangers, and Madison Square Garden. The incident highlights the organization's efforts to tighten security protocols following their recent success on the court.

Simulated phishing campaigns are a standard practice for large corporations aiming to identify employees who overlook warning signs in suspicious correspondence. These tests often mimic internal communications but include subtle clues, such as a misspelled sender domain, to distinguish them from legitimate messages. For example, Condé Nast, the parent company of Ars Technica, has used a test email from the address "condenest.com" to gauge employee vigilance. It remains unclear if the Knicks email included similar obvious red flags.

The specific lure carried extra weight because the Knicks recently won their first NBA championship in more than 50 years. Joe Vardon, a senior NBA writer for The Athletic, noted that most NBA team employees typically receive rings, though usually less elaborate versions than the players. Given the timing of the team's historic victory, staff might have found the offer plausible, or at least frustrating, rather than obviously fraudulent.

Vardon’s reporting also covered a separate ring-related event that occurred earlier this week. On Tuesday, the Knicks raised their first league championship banner since 1973. During the ceremony, assistant coaches were handed boxes containing no rings. The team stated that the staff will receive their physical rings at a later date, adding to the recent flurry of activity surrounding the championship celebration.