Dolan imposes cyber class after Knicks staff fall for ring bait

Madison Square Garden employees who clicked a link in a fake email offering free championship rings are required to attend a mandatory cybersecurity class. The New York Times reported on Thursday that the New York Knicks organization sent the message in late September as part of a test to see how well staff could spot scams.

The email subject line read, "Congratulations, your Employee Championship Ring is here." Recipients were instructed to click a link to choose between two ring designs. Team sources told the Times that clicking the link triggered the requirement for additional training.

The move aims to address growing concerns about digital security at the venue. James Dolan, who owns the Knicks, the New York Rangers, and Madison Square Garden, reportedly wants to strengthen the organization's defenses against such threats.

Simulated phishing messages are a standard tool for large companies. These tests often mimic internal communications to identify workers who overlook warning signs. For example, Ars Technica's parent company, Condé Nast, sends test emails from a misspelled domain. It remains unclear if the Knicks message contained similar obvious red flags.

The specific lure held weight because the offer was plausible. Joe Vardon, a senior NBA writer for The Athletic, noted that most NBA team employees typically receive rings, even if they are less elaborate than the players' versions. The Knicks recently won their first NBA championship in more than 50 years, making a fake offer tied to that milestone likely to catch staff off guard.

Vardon's report also covered a separate ring-related incident. On Tuesday, the Knicks raised their first league championship banner since 1973. During the ceremony, assistant coaches received boxes that were empty. They are expected to receive their actual rings at a later date.