Knicks Phishing Test, Claimed DHS Data Leak and NVIDIA CEO Spy-Plot Report

Summary
A Dark Reading episode discusses criticism of the Knicks' ring-themed phishing simulation, DDoSecrets' publication of a claimed DHS employee dataset under investigation, and a New York Times report alleging a Chinese intelligence asset targeted NVIDIA CEO Jensen Huang.
Key points
- MSG Sports' phishing simulation offered employees championship rings; clicking the email link led to a failed-test notice and mandatory cybersecurity training. An MSG spokesperson called it an unfortunate mistake.
- DDoSecrets published the Icepick dataset, said to contain records for roughly 41,000 DHS employees and contractors.
- The Department of Peace claimed the data came from a DHS Okta-based identity system. Okta said it had no evidence its data or systems were compromised, while DHS described the matter as a potential breach under investigation.
- The dataset reportedly includes employee contact and office details, reporting structures, and references to more than 55,000 internal permissions groups. Reviewers said the records appeared legitimate.
- A New York Times report alleged that Alice Huang, described as a Chinese intelligence asset, had a close relationship with NVIDIA CEO Jensen Huang and sought information about chip-export policy and AI policy.
- The episode says NVIDIA characterized Jensen Huang's meetings with executives as normal; it also notes that the reporting did not specify what steps were taken to mitigate the alleged targeting.
Article Details
- Event Type
- A controversial MSG Sports phishing simulation; a reported DHS employee-data leak claimed by a hacktivist group; and a reported espionage effort targeting NVIDIA CEO Jensen Huang.
- Impact
- The MSG Sports simulation told employees who clicked that they had failed and must attend mandatory cybersecurity training; employees did not receive the ring offers used in the test. DDoSecrets published a dataset reportedly containing records for roughly 41,000 DHS employees and contractors, including work contact details, office locations, and internal permissions-group information. Reviewers said the data appeared legitimate, but DHS described the incident as a potential breach and said it was investigating; Okta said it had no evidence its data or systems were compromised. A New York Times report described Alice Huang as allegedly working for the Chinese government and seeking information about US policy on NVIDIA chip sales and AI policy through her relationship with Jensen Huang. NVIDIA said the CEO meets many executives; the article says he was unaware of the alleged activity at the time.
People
Alice HuangIdentified in the report as allegedly working for the Chinese government and developing a close relationship with Jensen Huang to obtain information; the article does not identify her as a cyber operator.Jensen HuangNVIDIA CEO reportedly targeted by an alleged Chinese intelligence asset seeking information about US policy on chip sales and AI.
Threat Actors
Vendors
Nvidia40,000 employees, and it's unclear how the agency was compromised; and a New York Times report claims a NVIDIA CEO Jensen Huang was targeted by a Chinese intelligence asset.OktaThe attackers claim the data came from a DHS Okta-based identity system, which Okta currently denies or kind of denies; they said Okta is secure and we have no evidence our data or systems were compromised. What is also
Countries
Chinaout what the US policy was going to be about NVIDIA chip sales to companies and countries abroad, to China, whether there was going to be a block on that, also get intelligence about AI policy in general. PrettyUnited Statesincluding ICE [Immigration and Customs Enforcement], CBP [US Customs and Border Protection], USCIS [United States Citizenship and Immigration Services]. Both of those are our border protection and immigration sort of
