Knicks Reverse Course After Fake Championship Ring Phishing Test Sparks Backlash

The New York Knicks are changing course after using the promise of championship rings in an employee cybersecurity test, with Madison Square Garden now planning to distribute more than 275 rings and pieces of jewelry to players, coaches, employees and other members of the organization.

Knicks Reverse Course After Fake Championship Ring Phishing Test Sparks Backlash


An MSG spokesperson described the decision to use championship rings as bait in a simulated phishing email as “an unfortunate mistake” in a statement to Yahoo Sports on Friday.

The controversy followed a report by The Athletic that the company had sent employees emails last month offering championship rings as part of an internal security exercise designed to help protect the organization against cyberattacks.

MSG Cites Previous Cybersecurity Breach

According to the company, the phishing simulation followed a recent hacking and extortion incident in which an employee’s login credentials were reportedly obtained through a similar attack.

MSG said the test was intended to strengthen its defenses against hackers, but acknowledged that using championship rings to attract employees’ attention was a mistake.

“The company had previously sent out an email to its corporate team as a simulation of a phishing attack designed to strengthen our security against hackers,” the spokesperson said.

The statement added that MSG had recently been hacked and extorted using an employee login and password obtained through a similar phishing attack.

Phishing simulations are commonly used by organizations to help employees recognize suspicious messages before they share sensitive information or click potentially harmful links. However, the Knicks’ approach attracted attention because it used the promise of a major championship reward as the lure.

Knicks to Distribute More Than 275 Rings and Jewelry Pieces

The company’s response also addresses concerns about which members of the organization would receive championship jewelry.

The original report raised questions about employees who had worked for MSG for years, including some in the Knicks’ business operations, who were reportedly not expected to receive rings.

MSG has now said it will distribute more than 275 championship rings and pieces of jewelry to players, coaches, employees and other members of the Knicks family.

According to the company, the jewelry will have a combined value of more than $3.7 million.

Professional sports teams often determine which people beyond the players receive championship rings. Some organizations provide customized or less elaborate versions to coaches, executives, support staff and other employees who contributed to a championship season.

Championship Rings Celebrated During Knicks Home Opener

The controversy emerged just days after the Knicks celebrated their championship by raising their banner at Madison Square Garden and presenting players with elaborate rings during Tuesday’s home opener.

The players’ rings feature a removable top that reveals a miniature version of Madison Square Garden, making the design a tribute to the team’s home arena.

The championship celebration was intended to mark a significant moment for the franchise and its supporters. However, the revelation about the internal phishing test shifted attention toward MSG’s cybersecurity practices and its treatment of employees.

A Cybersecurity Lesson Becomes a Public Relations Issue

The Knicks’ situation highlights the challenge organizations face when designing security-awareness exercises. Companies need to prepare employees for realistic phishing attempts, but the choice of incentive or message can also affect workplace trust and morale.

MSG has acknowledged that the championship-ring offer was the wrong approach and says it will now provide rings and jewelry to a broader group of people associated with the organization.

The company’s planned distribution could help address employee concerns, but the incident has already turned what was intended as a cybersecurity exercise into an unexpected public relations story for one of the NBA’s most recognizable franchises.

Comments

Comments