New York Knicks and MSG apologize for championship ring phishing test

Madison Square Garden (MSG) and the New York Knicks have issued apologies following a controversial internal cybersecurity exercise. In September, employees received an email titled “Congratulations, your Employee Championship Ring is here,” which offered a choice between two ring designs. However, clicking the link instead directed staff to mandatory cybersecurity training, revealing the message was a simulated phishing attack.

MSG officials described the use of the championship rings as an “unfortunate mistake,” though they maintained that the goal of protecting intellectual property was necessary following a previous security breach involving stolen employee credentials. The incident drew significant criticism from sports commentators regarding employee treatment.

Separately, the organization addressed reports that assistant coaches received empty ring boxes during the team’s recent championship ceremony. MSG clarified that while players received their rings during the season opener, more than 275 other employees and staff members are scheduled to receive jewelry valued at over $3.7 million within the next four to six weeks.