Knicks owner James Dolan orders security course after fake ring email

Madison Square Garden is requiring specific employees to complete a cybersecurity class after they fell for a simulated phishing email.

The New York Knicks organization sent the test message to its staff in late September. The email subject line read, "Congratulations, your Employee Championship Ring is here." Recipients who opened the message were prompted to click a link to select one of two ring designs.

According to team sources cited by The New York Times, Madison Square Garden employees who clicked the link are now mandated to attend the training. The course is designed to address growing concerns about digital security within the organization. James Dolan, the owner of the Knicks, the New York Rangers, and Madison Square Garden, has been focusing on these issues.

Simulated phishing campaigns are standard practice for large corporations. These tests measure how many employees overlook warning signs in suspicious emails. Such messages often mimic internal communications but include subtle errors. For instance, Ars Technica's parent company, Condé Nast, uses a misspelled domain name to send similar test alerts to its staff.

It remains unclear if the Knicks email contained obvious red flags like a misspelled domain. The offer was also plausible because most NBA team employees receive championship rings, though their versions are usually less elaborate than the players' rings. Joe Vardon, a senior NBA writer for The Athletic, noted this common practice.

The timing of the test added weight to the lure. The Knicks recently won their first NBA championship in over 50 years. Staff members might have been surprised or frustrated by a fake offer tied to that milestone. Vardon's report also covered a separate ring-related incident. On Tuesday, the Knicks raised their first league championship banner since 1973. Assistant coaches received boxes during the ceremony, but they did not contain rings. Those coaches are expected to receive their rings at a later date.