Madison Square Garden (MSG) confirmed that it used New York Knicks championship rings as a lure in a cybersecurity phishing test sent to employees. The company described the decision to use the rings as bait as an unfortunate mistake, acknowledging the sensitivity of the issue after reports surfaced that assistant coaches and other staff had not yet received their championship jewelry.
The controversy emerged late Thursday when reports indicated that the organization had not distributed rings to its assistant coaches or other employees, creating frustration among staff. The situation escalated when employees received an email last month disguised as an opportunity to redeem their rings. According to The Athletic, those who clicked the link in the message were not offered jewelry choices but were instead directed to a mandatory cybersecurity class. The report noted that this requirement was intended to address owner James Dolan's growing concerns regarding network security.
MSG issued a statement on Friday confirming that the email was a simulation of a phishing attack designed to strengthen the organization's defenses against hackers. The statement highlighted that MSG had recently been hacked and extorted using an employee login and password obtained through a similar phishing attack. The company stated that using the rings to gain employees' attention was an unfortunate mistake.
In its response, MSG clarified its plans for distributing the championship hardware. The company said it would provide more than 275 championship rings and jewelry pieces to players, coaches, employees, and other members of the Knicks family. These items are valued at more than $3.7 million and are intended to recognize contributions and celebrate the team's achievement.
The Knicks celebrated their first NBA championship since 1973 by hanging a banner during their season opener on Tuesday night. Players received 22-carat rings estimated to be worth at least $100,000 each. Each ring features roughly 800 diamonds and a recreation of Madison Square Garden. While coaches were reportedly told they would eventually receive rings, they did not receive them alongside the players on Tuesday. Employees, however, were apparently told not to expect any rings initially.
The phishing email, which reportedly went out last month, was personalized with the employee's name and claimed that MSG was issuing a complimentary championship ring with the same craftsmanship as the players' versions. The message offered two designs: Championship Gold and Garden Classic, and included a link for employees to reserve their preferred design.