Science & Tech · Cybersecurity · 3 hrs ago
Knicks employees were promised rings in a phishing test
Madison Square Garden offered employees fake Knicks championship rings in an email that was actually a cybersecurity test.
The message, sent in late September, invited staff to choose a design and register for personalized jewellery.
Employees who followed the link were assigned cybersecurity training instead of receiving rings, though the company has not said how many were affected.
The exercise aimed to spot workers vulnerable to fraudulent messages and credential theft.
The test followed an earlier cyberattack in which stolen employee credentials were reportedly used to access company systems and extort the organization.
Madison Square Garden said using the rings as bait was an unfortunate mistake.
The organization plans to distribute more than 275 commemorative items worth an estimated total of more than $3.7 million, but it has not said how many employees will get rings rather than other jewellery.
Some assistant coaches who received empty presentation boxes are expected to get their rings later, while many long-time arena and business employees reportedly remain excluded.
The New York Knicks faced criticism after employees were offered free championship rings in an email that was actually a cybersecurity test.
Employees who followed the invitation were reportedly assigned mandatory cybersecurity training instead of receiving rings.
Madison Square Garden Sports called using the rings as bait an “unfortunate mistake.”
The company said the test followed an earlier cyberattack in which employee credentials were compromised through a similar fraudulent message.
The company said it planned to distribute more than 275 commemorative items with an estimated combined value above $3.7 million.
- Who
- Madison Square Garden Sports and employees at Madison Square Garden.
- What
- Employees were offered championship rings in a phishing test. Those who followed the instructions were reportedly assigned cybersecurity training.
- When
- The deceptive message circulated in late September.
- Where
- Madison Square Garden, New York.
- Why
- The exercise was intended to identify employees susceptible to fraudulent messages and credential theft, following an earlier cyberattack.
Knicks employees and critics
Madison Square Garden Sports
Use of championship rings as bait
Knicks employees and critics
Employees were offered rings but received mandatory cybersecurity training instead; the company called the tactic an “unfortunate mistake.
Madison Square Garden Sports
The company said the test was intended to improve security awareness after an earlier cyberattack compromised employee credentials.
Hackers reportedly used employee credentials obtained through a similar fraudulent communication to access company systems and extort the organization.
An email offered employees complimentary championship rings as part of an internal security assessment.
They were reportedly assigned compulsory cybersecurity lessons.
- Email circulation
- Late September
- Advertised ring designs
- Championship Gold; Garden Classic
- Planned commemorative items
- More than 275
- Estimated combined value
- More than $3.7 million
- Championship referenced
- Knicks’ first NBA championship since 1973
What people are saying
Using the rings as a lure to gain employees’ attention was an unfortunate mistake