Knicks owner James Dolan mandates security training after staff click fake ring email

James Dolan has required Madison Square Garden employees who clicked a suspicious link to attend a mandatory cybersecurity course, according to a report from The New York Times.

The organization sent the simulated phishing email to staff in late September. The subject line read, "Congratulations, your Employee Championship Ring is here." The message instructed recipients to click a link to select between two ring designs.

Dolan, who owns the Knicks, the New York Rangers, and Madison Square Garden, reportedly ordered the training in response to growing concerns about digital security. The test mirrors a common practice among large corporations, which use simulated scams to identify workers who may overlook warning signs in suspicious correspondence.

Many such tests appear to originate from the employer but contain subtle clues that expose them as fakes. For example, Condé Nast, the parent company of Ars Technica, sends test messages from a misspelled domain, "condenest.com." It remains unclear if the Knicks email included similar red flags.

Joe Vardon, a senior NBA writer for The Athletic, noted that the offer was plausible. Most NBA team employees typically receive championship rings, though their versions are often less elaborate than those given to players. The Athletic was acquired by The New York Times in 2022 and subsequently merged into the parent organization.

The bait carried additional weight because the Knicks recently secured their first NBA title in more than 50 years. Staff members who fell for the offer could be frustrated by a fake gift tied to that specific milestone.

The incident follows a separate ring-related event on Tuesday, when the team raised its first championship banner since 1973. During the ceremony, assistant coaches received boxes that did not contain rings. Those employees are expected to receive their jewelry at a later date.