Knicks used fake championship ring offer in phishing test

The New York Knicks faced criticism after an email offering employees complimentary NBA championship rings turned out to be an internal cybersecurity exercise. Staff who followed the invitation were reportedly assigned mandatory cybersecurity training instead of receiving commemorative jewellery.

The message circulated in late September and offered two designs, Championship Gold and Garden Classic. Employees could register their choice through a link. The organization has not disclosed how many employees were affected or what warning signs appeared in the message. Joe Vardon, a senior NBA journalist at The Athletic, reported that several people familiar with the situation confirmed the exercise’s purpose.

Madison Square Garden Sports acknowledged the incident and called using the rings to attract employees’ attention “an unfortunate mistake.” The organization said the test followed an earlier cyberattack in which employee credentials were compromised through a similar fraudulent message. Hackers reportedly used those credentials to access company systems and extort the organization.

The report said the Knicks’ championship was their first since 1973. The organization also said it plans to distribute more than 275 commemorative items, including rings and other jewellery, with a combined estimated value exceeding $3.7 million. Some assistant coaches received empty presentation boxes at the celebration and are expected to receive their rings later. The organization has not said how many employees will receive rings rather than other jewellery.