Madison Square Garden officials defended an internal cybersecurity simulation that used personalized New York Knicks championship rings as bait, acknowledging the exercise drew immediate backlash from employees and sports commentators alike after details surfaced. The simulation, deployed by franchise owner James Dolan’s operating company, sent mass emails to staff offering complimentary ring designs in late September before the team’s opening-night ceremony at Madison Square Garden (NBC New York).
MSG Concedes Phishing Test Mistake
The controversy began when employees received a message congratulating them on their supposed championship hardware and inviting them to select between two distinct styles: “Championship Gold” and “Garden Classic” (Gizmodo). Workers who clicked the link in the message discovered it was a phishing test (NBC New York). Those who failed the simulation were required to complete mandatory cybersecurity training (NBC New York).
An MSG Sports spokesperson explained that the organization introduced the test following a prior cyber attack that exploited an employee’s stolen login credentials (sportando.basketball). “Using the rings as a lure to gain employees’ attention was an unfortunate mistake,” an MSG Sports spokesperson told NBC on Friday.
Despite the contentious drill, the organization stated it is distributing more than 275 championship rings and commemorative jewelry pieces—valued at over $3.7 million—to players, coaches, employees and other members of the Knicks family (NBC New York). The franchise raised its championship banner at Madison Square Garden on Tuesday night, commemorating the team’s first title in more than 50 years and first since 1973 (Gizmodo).
Sports Media Criticizes Simulation as Corporate Defense Is Defended
The simulation drew harsh criticism across sports media and social platforms after the report by The Athletic (Gizmodo). Josh Margolis of NBC Montana wrote on X that disguising a test as a ring order was “really, really gross” (Gizmodo). SB Nation writer James Dator characterized the fake offer as a scam and described it as “beyond disgusting” (Gizmodo).
Other observers defended the necessity of corporate digital defense protocols. A Knicks fan account posted that running phishing tests is standard practice across corporate America to prevent malicious breaches that could bankrupt organizations (Gizmodo).
Broader industry guidelines caution against punitive security simulations. Guidance from the National Institute of Standards and Technology states that phishing exercises should not be punitive or single out employees for their responses (Gizmodo). Similarly, the U.K.’s National Cyber Security Centre warns that punishing staff for clicking test links can resemble entrapment (Gizmodo).
Opening Night Ring Ceremony Discrepancies
The phishing controversy coincided with discussion over the team’s ring distribution during Tuesday’s opening-night ceremony (NBC New York). Several assistant coaches received ring boxes that appeared to be empty during the event (Gizmodo). MSG Sports clarified that players received their rings during the opening night ceremony as planned, while coaching staff and other personnel are scheduled to receive theirs in about four to six weeks (NBC New York).
Disguising a phishing test as a championship ring order is really, really grossThe players need to step in and get the Knicks’ employees their rings https://t.co/vnhTwdmGzc
