THE New York Knicks organisation ran a phishing exercise in which an email promising free “Employee Championship Ring” asked recipients to click a link to choose between two ring designs. The missive, circulated in late September, presented two options—“Championship Gold” and “Garden Classic”—and claimed the rings would be issued at no cost to the employee.
While one source cited by The Athletic framed the stunt as part of Dolan’s mounting cybersecurity concerns, several team sources described the message as a phishing test. The piece notes that some Madison Square Garden staff reportedly clicked the link, though it is not clear how many did so or what follow‑up actions occurred.
Evidence within the report centres on quotes from The Athletic and coverage in The New York Times, with The Athletic recounting that assistant coaches were given empty ring boxes on a separate occasion, suggesting a broader context of ring-night communications and potential disparities in who ultimately receives rings. The article states that multiple team sources confirmed the phishing test, but leaves unresolved how many employees clicked through or whether any employees will still receive rings.
The practical response described includes a mandatory cybersecurity class for affected staff to address concerns raised by owner James Dolan. The piece emphasises that phishing tests are common in corporate security programmes and distinguishes the test from genuine offers, noting the importance of spotting telltale phishing signs.