MSG uses Knicks championship rings as bait in phishing test, calls the lure ‘an unfortunate mistake’
MSG used a fake offer of Knicks championship rings in a phishing test for employees, prompting criticism after staff who clicked the link were required to attend cybersecurity training. The company called the choice of lure “an unfortunate mistake”, particularly as the Knicks’ support staff had reportedly not received rings alongside the players.
MSG said the test was intended to strengthen security after hackers recently extorted the company using login details obtained through a similar phishing attack. It said it would distribute more than 275 rings and other jewellery, worth over $3.7 million, to players, coaches, employees and others in recognition of their contributions. Players’ rings reportedly contain about 800 diamonds and are estimated to be worth at least $100,000 each.
In short
- MSG used a ring offer in an employee phishing test.
- Clickers were sent to mandatory cybersecurity training.
- The company plans to distribute over 275 rings and jewellery.
Steelman: both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
After a recent phishing attack led to extortion, MSG had a strong reason to test whether employees could spot deceptive messages and to require training for those who clicked. A convincing lure can make the exercise useful, and recognising contributors with rings may reflect the organisation’s stated aim to reward a broad group involved in the championship.
The case against
Using the prospect of championship rings as bait could feel insensitive, especially to staff who had reportedly not received rings, and risks weakening trust in the security exercise. Requiring clicked employees to attend training may also seem punitive if the test’s design exploited a meaningful workplace grievance rather than helping staff learn in a constructive way.
Explained simply
Madison Square Garden Sports (MSG) owns the New York Knicks, a professional basketball team in the NBA. Championship rings are valuable keepsakes given to members of a team after a title win, though who receives one can vary.
Companies sometimes send staff fake emails to see whether they click suspicious links, as part of efforts to protect their computer systems. Such tests are intended to highlight security risks, especially when stolen login details could let attackers access company information or demand money.
Cybersecurity Technology World