MSG: Using Knicks rings in employee phishing test was
Madison Square Garden employees were subjected to a phishing test that used the promise of a 2026 Knicks championship ring as bait. The company admitted the tactic was a mistake after facing criticism for using the rings to test cybersecurity awareness.
Why it matters
Illustrates the aggressive methods organizations are using to combat phishing and the potential for internal backlash when testing employees.
An offer to select their own New York Knicks championship rings turned out to be a harsh lesson in cybersecurity for some Madison Square Garden employees.
MSG staffers received an email in September appearing to allow them to reserve one of two ring variants to commemorate the Knicks' 2026 title, sources told Joe Vardon of The Athletic . However, the email was actually a phishing test; employees who clicked the link in the message were apparently mandated to take a cybersecurity class because of Knicks owner James Dolan's increasing concerns about the issue.
The phishing test read: "(Employee name), this one is on the house. MSG is issuing a complimentary employee championship ring. The same jeweler, the same craftsmanship, personalized with your name. No cost to you.
"There are two designs to choose from: Championship Gold and Garden Classic. Reserve the one you want below."
Headlinne story · 3 newsrooms
New York Knicks Distribute Championship Rings Following Employee Phishing Test Controversy
What every outlet reported, where they differ, and how each framed it →
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in