CrimeDec 20, 2022
The Biggest Security Mistakes Jewelers Are Making Right NowCrimeJan 04, 2023
How a Jeweler Lost $1.6M in Less than 24 Hours
Joyce’s Jewelry in Uniontown, Pennsylvania, is suing PNC Bank after cybercriminals emptied its accounts through a series of wire transfers.
Joyce’s Jewelry in Uniontown, Pennsylvania, is suing PNC Bank after cybercriminals stole more than $1.6 million from its accounts via unauthorized wire transfers. (Image courtesy of Joyce’s Jewelers Facebook page)
Uniontown, Pa.—The owners of Joyce’s Jewelry in the Pittsburgh-area city of Uniontown are suing PNC Bank after cybercriminals emptied its accounts of nearly $1.6 million through a series of wire transfers.
The retailer filed the lawsuit in October accusing PNC Bank of failing to keep its money safe. The Pittsburgh Post-Gazette covered the suit in a story published Monday.
The theft took place on the afternoon of May 12, 2022.
According to court documents filed in U.S. District Court in Pittsburgh, a jewelry store employee accidentally logged into a phony website made to look like PNC Bank’s website.
She noticed the website wasn’t loading properly and called the customer service number she found on the spoofed webpage. She was advised to be patient as the website was slow that day, something she said PNC had told her before, court documents state.
Soon after, the store’s internet service went down. Then the employee and Joyce’s Jewelry CEO Brandon Katzeff experienced a “subscription attack,” meaning they started receiving hundreds of emails every hour making it difficult to tell which are genuine.
That night, PNC sent Katzeff an email, alerting him to “two small but suspicious charges” on one of the store’s credit cards. He called PNC’s fraud prevention service line and canceled the credit card.
In the lawsuit, Joyce’s claims no mention was made of any other suspicious activity or the multiple wire transfers made that day.
The next morning, after IT services restored the store’s internet service, Katzeff realized the company accounts had been hacked and he reached out to PNC Bank.
Using the employee’s login credentials obtained from the phishing website, cybercriminals had emptied all four of the store’s accounts through 11 wire transfers over a period of 20 hours.
In total, around $1.6 million was transferred from the jeweler’s PNC accounts to the hackers’ accounts at JPMorgan Chase and Bank of America.
Later that day, a PNC cyber fraud analyst emailed Katzeff about an attempted wire transfer of more than $105,000. It was the last of nearly a dozen unauthorized wire transfers and the only one flagged by the bank, the lawsuit claims.
The analyst told Joyce’s the bank held no responsibility for the losses and advised Katzeff to contact law enforcement and the beneficiary banks.
PNC Bank has filed a motion to dismiss the lawsuit and, through a spokesperson, said it believes it took the right steps in regard to the transactions.
“While PNC regrets any losses incurred by a customer, we disagree with the allegations in this case and believe we acted appropriately with respect to the transactions,” a PNC Bank spokesperson said in a statement to National Jeweler.
Related stories will be right here …
The retailer filed the lawsuit in October accusing PNC Bank of failing to keep its money safe. The Pittsburgh Post-Gazette covered the suit in a story published Monday.
The theft took place on the afternoon of May 12, 2022.
According to court documents filed in U.S. District Court in Pittsburgh, a jewelry store employee accidentally logged into a phony website made to look like PNC Bank’s website.
She noticed the website wasn’t loading properly and called the customer service number she found on the spoofed webpage. She was advised to be patient as the website was slow that day, something she said PNC had told her before, court documents state.
Soon after, the store’s internet service went down. Then the employee and Joyce’s Jewelry CEO Brandon Katzeff experienced a “subscription attack,” meaning they started receiving hundreds of emails every hour making it difficult to tell which are genuine.
That night, PNC sent Katzeff an email, alerting him to “two small but suspicious charges” on one of the store’s credit cards. He called PNC’s fraud prevention service line and canceled the credit card.
In the lawsuit, Joyce’s claims no mention was made of any other suspicious activity or the multiple wire transfers made that day.
The next morning, after IT services restored the store’s internet service, Katzeff realized the company accounts had been hacked and he reached out to PNC Bank.
Using the employee’s login credentials obtained from the phishing website, cybercriminals had emptied all four of the store’s accounts through 11 wire transfers over a period of 20 hours.
In total, around $1.6 million was transferred from the jeweler’s PNC accounts to the hackers’ accounts at JPMorgan Chase and Bank of America.
Later that day, a PNC cyber fraud analyst emailed Katzeff about an attempted wire transfer of more than $105,000. It was the last of nearly a dozen unauthorized wire transfers and the only one flagged by the bank, the lawsuit claims.
The analyst told Joyce’s the bank held no responsibility for the losses and advised Katzeff to contact law enforcement and the beneficiary banks.
PNC Bank has filed a motion to dismiss the lawsuit and, through a spokesperson, said it believes it took the right steps in regard to the transactions.
“While PNC regrets any losses incurred by a customer, we disagree with the allegations in this case and believe we acted appropriately with respect to the transactions,” a PNC Bank spokesperson said in a statement to National Jeweler.
Joyce’s Jewelry disagrees.
The transfers should have raised a red flag for PNC, the jeweler said in its lawsuit, noting the money was moved to accounts and businesses it had never sent money to before.
The wire amounts were also far above the usual transaction amounts by tens of thousands of dollars per wire. Joyce’s had never wired close to a million dollars in one day.
The wires also exceeded the funds available, leading to an overdraft charge of nearly $200,000 for a customer that, to the best of Joyce’s knowledge, had not overdrawn on an account before.
“The bank’s failures here are stark and should shock and frighten small business customers who believe their accounts and accumulated savings are secure with PNC,” court documents state.
“PNC’s failures allowed substantially all the liquidity that Joyce’s had managed to accumulate over decades to be stolen in less than 24 hours.”
The bank has also not provided the jeweler with information about how to recoup its losses, said Joyce’s, and allegedly kept the owners in the dark about what was being done to recover the money.
The jeweler was also directed to a third-party collection agency to demand repayment of the overdraft fees and could be billed for “corporate analysis charges” as PNC looks into the theft.
The family-owned business was founded by Joyce Katzeff in the early 1970s. It began as a small store in Uniontown, Pennsylvania, later expanding to a 7,000-square-foot location.
The company has banked with PNC and banks acquired by PNC since its founding and implemented the recommended security features on its “Pinacle” online and mobile banking platform.
The wire procedures and security protocol for Joyce’s requires multi-factor and dual-control authorization to send wires, the jeweler said in the suit, but the thieves got into their accounts using just one employee’s login information.
The suit notes that some of the money has been recovered, including an anticipated, unspecified “partial” recovery from Bank of America and more than $224,000 from JPMorgan.
However, PNC withdrew around $192,000 to pay itself for the overdraft, interest, and fees.
Joyce’s losses stand at around $1.1 million as of October 2022.
In addition to the financial loss, Joyce’s said it has struggled to run its jewelry store with minimal cash and frozen accounts.
Its employees and vendors were also unable to cash or deposit their paychecks and payments.
The retailer has had to change its purchasing practices, the suit states, causing it to lose out on discounts from trade show purchases.
And Joyce’s senior management has had to shift focus from the business to its financial issues.
The jeweler is asking the court to order PNC Bank to refund all of its stolen money and overdraft fees as well as award it damages.
More on Crime
The Latest
FinancialsMay 17, 2024
Richemont Appoints Van Cleef & Arpels’ Nicolas Bos as New CEOThe announcement coincided with its full-year results, with growth driven by its jewelry brands.
FinancialsMay 17, 2024
Watches of Switzerland’s Fiscal-Year Sales Flat Looking ahead, the retailer said it sees “enormous potential” in Roberto Coin’s ability to boost its branded jewelry business.
Recorded WebinarsMay 17, 2024
Watch: Preparing for Trade Show SuccessJewelry trade show veterans share strategies for engaging buyers, managing your time effectively, and packing the right shoes.
Brought to you by
Record Gold Prices Have Consumers Undeterred. Here’s Why.Despite the rising prices, consumers continue to seek out the precious metal.
AuctionsMay 17, 2024
Piece of the Week: Cartier’s Ring-Tailed LemurThis little guy’s name is Ricky and he just sold for more than $200,000 at Sotheby’s Geneva jewelry auction.
Weekly QuizMay 16, 2024
This Week’s QuizTest your jewelry news knowledge by answering these seven questions.
AuctionsMay 16, 2024
Christie’s Holds 2 Sales Despite CyberattackThough its website has been down for a week, Christie’s proceeded with its jewelry and watch auctions on May 13-14, bringing in nearly $80 million.
AuctionsMay 16, 2024
Sotheby’s Withdraws 101-Carat Yellow Diamond from AuctionDespite the absence of “The Allnatt,” Sotheby’s Geneva jewelry auction totaled $34 million, with 90 percent of lots sold.
Brought to you by
From Registration to Return: 10 Tips to Protect You Before, During and After a TradeshowTradeshow risks are real. Get tips to protect yourself before, during and after and gain safety and security awareness for your business.
ColumnistsMay 16, 2024
The PR Adviser: What the Designer Should’ve DoneLilian Raji gives advice to designers on how to make the most of great publicity opportunities.
SourcingMay 16, 2024
Lucapa to Shed Stake in Lesotho Diamond Mine The mining company wants to divest its 70 percent holding in the Mothae Diamond Mine in an effort to streamline its portfolio.
ColumnistsMay 15, 2024
Squirrel Spotting: Why Retailers Struggle to Fire BrandsWhy do so many jewelers keep lines that are not selling? Peter Smith thinks the answer lies in these two behavioral principles.
AuctionsMay 15, 2024
Red Diamond Breaks Records at Phillips GenevaThe “Argyle Phoenix” sold for more than $4 million at the auction house’s second jewels sale.
Events & AwardsMay 15, 2024
See Who’s in JA’s 2024 ‘20 Under 40’ ClassThe annual list recognizes young professionals making an impact in jewelry retail.
IndependentsMay 15, 2024
David Mann Jewelers in Upstate NY to Close After 35 YearsOwner David Mann is heading into retirement.
FinancialsMay 15, 2024
Brilliant Earth’s Sales Fall Flat in Q1 While overall sales were sluggish, the retailer said its non-bridal fine jewelry was a popular choice for Valentine’s Day.
SourcingMay 14, 2024
Anglo American Confirms It Is Looking to Sell De Beers The mining giant also wants to offload its platinum business as part of an overhaul designed to “unlock significant value.”
AuctionsMay 14, 2024
2 Huge Yellow Diamonds Are Heading to AuctionChristie's is selling one of the diamonds, moving forward with its Geneva jewelry auction despite the cyberattack that took down its website.
MajorsMay 14, 2024
Platinum Born Taps ‘Born Leaders’ for New CampaignThe ad aims to position platinum jewelry as ideal for everyday wear.
GradingMay 14, 2024
Instappraise Adds Trifold Brochure to Appraisal OfferingsRetailers can customize and print the appraisal brochures from their store.
Lab-GrownMay 13, 2024
Lab-Grown Diamond Brand Lightbox Cuts Prices by 25 to 40%The move follows a price-drop test run in Q4 and comes with the addition of a “quality assurance card” from GIA for some loose diamonds.
TechnologyMay 13, 2024
Christie’s Website Brought Down by Hackers, Watch Auction Postponed The site has been down since Thursday evening, just ahead of its spring auctions.
AuctionsMay 13, 2024
Madeleine Albright’s Jewelry, Pins a White-Glove Sale at Freeman’s | HindmanThe late former U.S. Secretary’s collection went for quadruple the sale’s pre-sale estimate.
IndependentsMay 13, 2024
Zachary’s Jewelers Names Mother’s Day Jewelry Contest WinnersThree fifth graders’ winning designs were turned into custom jewelry pieces in time for Mother’s Day.
IndependentsMay 10, 2024
Frank Adams Jewelers Names New CEOKimberly Adams Russell is taking over the role from her father, David Adams, marking the third generation to hold the title.
CollectionsMay 10, 2024
Piece of the Week: Carina Hardy’s ‘Birth of Venus’ NecklaceAs a token of womanhood, this necklace depicts when Venus was born from the sea.
MajorsMay 09, 2024
Watches of Switzerland Pays $130M for Roberto Coin Inc.The deal gives the retailer control over the distribution of Roberto Coin jewelry in the U.S., Canada, Caribbean, and Central America.
TrendsMay 09, 2024
Amanda’s Style File: Shine Bright, Moms Show your mother some love with a piece of fine jewelry.
