> ## Content Index
> Fetch the complete content index at: https://bullquill.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# MSG calls Knicks championship ring phishing test a mistake
- URL: https://bullquill.com/knicks-championship-ring-phishing-test/
- Published: 2026-10-23T23:03:27.000Z
- Updated: 2026-10-23T23:25:23.000Z
- Description: MSG says it was recently hacked and extorted through a similar phishing attack. It is giving more than 275 championship rings and pieces of jewelry, worth over $3.7 million, to players, coaches, employees and others.
- Author: Rowan Ashby
- Tags: Culture & Viral, Trending, New York Knicks, Madison Square Garden, Phishing, NBA, #lang-en, #tr-knicks-championship-ring-phishing-test

## Key takeaways

- Madison Square Garden (MSG) used free Knicks championship rings as bait in an internal phishing test email sent to staff in late September 2026.
- On Friday, October 23, an MSG spokesperson called the ring lure "an unfortunate mistake" and said the company had recently been hacked and extorted through a similar phishing attack.
- MSG says it is giving more than 275 championship rings and pieces of jewelry, worth over $3.7 million, to players, coaches, employees and others in the organization.
- It is not yet clear which employees will receive rings or when. MSG has not given details of the earlier hack.

## Knicks championship ring phishing test: what happened

Madison Square Garden called its Knicks championship ring phishing test "an unfortunate mistake" on Friday, October 23, 2026\. The late-September email offered staff free rings as bait; MSG says rings will go to employees.

The Athletic first reported the story on Thursday, October 22\. It said a mass email went to Knicks business-operations and arena staff in late September with the subject line "Congratulations, your Employee Championship Ring is here," according to NBC New York. The message offered two ring designs, named "Championship Gold" and "Garden Classic," at no cost to the recipient.

The offer was not real. Staff who clicked the link were told they had failed a phishing test and would have to attend a mandatory cybersecurity class, ESPN and NBC New York reported, citing The Athletic.

On Friday, October 23, an MSG spokesperson confirmed the report to Yahoo Sports, ESPN and NBC New York. The spokesperson said the email was a simulated phishing attack meant to strengthen the company's defenses against hackers, and added: "MSG was recently hacked and extorted using an employee login and password obtained through a similar phishing attack." The spokesperson described the use of the rings as bait as "an unfortunate mistake."

## Timeline

| Date (2026)          | Development                                                                                                                 | Source                                  |
| -------------------- | --------------------------------------------------------------------------------------------------------------------------- | --------------------------------------- |
| Late September       | MSG staff receive an email offering a free "Employee Championship Ring"; clicking it reveals a phishing test                | The Athletic, via NBC New York and ESPN |
| Tuesday, October 20  | Knicks receive their rings and raise the championship banner before the season opener against the Philadelphia 76ers at MSG | ESPN, NBC New York                      |
| October 20           | Some Knicks assistant coaches are handed empty ring boxes at the ceremony                                                   | The Athletic, via ESPN                  |
| Thursday, October 22 | The Athletic reports the phishing test                                                                                      | ESPN, Yahoo Sports                      |
| Friday, October 23   | MSG calls the ring lure "an unfortunate mistake" and says rings and jewelry will go to employees                            | Yahoo Sports, ESPN, NBC New York        |

## What we know and what we don't know yet

### What we know

- The test email went to MSG's corporate team, and clickers were sent to cybersecurity training (NBC New York, ESPN).
- MSG says it was recently hacked and extorted after an employee's login details were stolen in a phishing attack (MSG statement, reported by ESPN and Yahoo Sports).
- MSG says it is handing out more than 275 rings and pieces of jewelry, valued at more than $3.7 million, to "players, coaches, employees and other members of the Knicks family," according to Yahoo Sports.
- At the October 20 ceremony, some assistant coaches received empty boxes, partly because they had not yet been fitted, The Athletic reported. An ESPN source confirmed several coaches did not receive rings that night.

### What we don't know yet

- When the hack happened, what data or systems were affected, and whether any ransom was paid. MSG has not said.
- Exactly which employees will receive rings, and whether that includes everyone who got the test email. The Athletic had reported that many long-serving MSG staff, including some in Knicks business operations, were not set to receive rings.
- How many employees clicked the link.

## Background

The Knicks won the 2025-26 NBA Finals against the San Antonio Spurs, ending a 53-year wait for a championship, ESPN reported. The team also won the 2025-26 NBA Cup, and a banner for each title went up at the Garden on October 20\. That night's season opener against the 76ers is also covered in our report on [Trump's criticism of LeBron James during the anthem](https://bullquill.com/trump-lebron-james-national-anthem-disgrace/).

Apart from players, each team decides who gets a championship ring. Many owners give simpler versions to staff, Yahoo Sports noted. That is why a fake ring offer was such strong bait: many employees were waiting to hear whether they would get one.

Simulated phishing emails are a common part of corporate security training. Critics have long warned that using tempting rewards, such as pay rises or bonuses, can hurt staff trust. Stolen employee logins are also behind many real breaches, as seen in recent incidents like the [Capcom ID data breach](https://bullquill.com/capcom-id-data-breach-11-million-accounts/), the [Quest Diagnostics Quanum breach](https://bullquill.com/quest-diagnostics-quanum-breach-patient-records/) and the [State Bank of India cyberattack](https://bullquill.com/state-bank-of-india-cyberattack-what-we-know/).

## What it means

For MSG, the episode turned a routine security exercise into a public relations problem in the week of the Knicks' ring celebration. MSG now says employees will receive rings, which may ease some of the anger, but it has not given a list or a timeline.

For other companies, the story shows a balance that security teams have to strike. Realistic phishing tests help train staff, and MSG says it was itself breached through a phishing email. But lures built around things employees really want, such as rewards from their own employer, can backfire. Stronger sign-in protection, such as passkeys and password managers (see our report on [1Password's new login approach](https://bullquill.com/1password-ai-agents-login-without-passwords/)), reduces the damage when a password is stolen.

We will update this story if MSG gives details about the hack or ring distribution.

## Frequently asked questions

### What was the Knicks championship ring phishing test?

In late September 2026, Madison Square Garden emailed staff an offer of a free Employee Championship Ring in two designs. The email was a simulated phishing attack, and employees who clicked the link were told they had failed and must attend a cybersecurity class.

### What did MSG say about the phishing test?

On October 23, 2026, an MSG spokesperson said the company had recently been hacked and extorted through a similar phishing attack, and called using the rings as a lure "an unfortunate mistake."

### Will Knicks employees get championship rings?

MSG says it is giving more than 275 championship rings and pieces of jewelry, worth over $3.7 million, to players, coaches, employees and others. It has not said which employees will receive them or when.

## Sources

- [Yahoo Sports: Knicks call plan to use fake championship rings as employee phishing test "an unfortunate mistake"](https://sports.yahoo.com/nba/article/knicks-call-plan-to-use-fake-championship-rings-as-employee-phishing-test-an-unfortunate-mistake-will-issue-rings-to-employees-195704256.html?ref=bullquill.com)
- [ESPN: Phishing email to Knicks employees an "unfortunate mistake," MSG spokesman says](https://www.espn.com/nba/story/%5F/id/50258240/report-knicks-coaches-get-empty-ring-boxes-staff-phished?ref=bullquill.com)
- [NBC New York: Knicks employees offered championship rings in phishing test email](https://www.nbcnewyork.com/news/local/knicks-employees-championship-rings-phishing-test-email/6562553/?ref=bullquill.com)
- [CBS Sports: Knicks reportedly duped employees with championship ring email that was actually a phishing test](https://www.cbssports.com/nba/news/knicks-duped-employees-championship-ring-email-phishing-test/?ref=bullquill.com)