Knicks Employees Targeted in Phishing Test Masquerading as Championship Ring Offer
Article Content
- •MSG employees received a phishing email promising championship rings as part of a cybersecurity test.
- •Clicking the email link led to mandatory cybersecurity training instead of receiving rings.
- •Many MSG employees, including some in business operations, will not receive championship rings.
In September 2026, several employees at Madison Square Garden received a phishing email claiming they could reserve a complimentary championship ring from the New York Knicks. Those who clicked the link were redirected to a mandatory cybersecurity training session instead. This phishing test was part of the Knicks' efforts to enhance cybersecurity awareness among staff. While players received their championship rings during a ceremony on October 20, assistant coaches were given empty boxes, and many MSG employees were informed they would not receive rings at all. The incident has drawn criticism for its deceptive nature, as it misled employees into believing they would receive a reward. The Knicks' owner, James Dolan, has been noted for his increasing concerns regarding cybersecurity. The incident highlights the challenges organizations face in balancing cybersecurity training with employee morale.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (12)
Following this threat?
Track Madison Square Garden in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What was the phishing email about?
How did employees respond to the phishing test?
Will all employees receive championship rings?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…