CrimeDec 09, 2020
In the Wake of the Cyberattack on Stuller, 5 Tips on CybersecurityCrimeNov 02, 2021
Graff Gets Hit by Ransomware Attack
The data breach included some personal details of high-end clients.
Graff is known for its high jewelry, counting celebrities and world leaders among its clients. Pictured here is the “New Dawn” necklace from Graff’s “Tribal” collection, featuring 64 total carats of diamonds in 18-karat white gold.
London—High-end jeweler Graff has become the victim of a ransomware attack.
Ransomware is malware that uses encryption to hold a victim’s system or personal files and demands payment to get them back.
For most people involved in the Graff data breach, it included details like their name and potentially their home address—which can be retrieved in the public domain from other sources– rather than any other confidential details that would put them at risk of identity theft.
A Graff spokesperson said the brand informed “the small group of individuals whose personal data was compromised to such an extent” and advised them on the appropriate steps to take.
The brand’s security systems alerted it to the activity, allowing it to react quickly and shut down its network.
Graff said it has been working with the U.K.’s Information Commissioner’s Office and relevant law enforcement on the incident.
“Thanks to our robust back-up facilities we were able to rebuild and restart our systems within days - crucially with no irretrievable loss of data,” the spokesperson said.
“Sadly, it appears that notable brands, corporations and even government departments are deliberately targeted by unscrupulous operators to extort money, cause disruption or simply embarrassment. Cybercrime continues to rise in scale and complexity. It is a threat to every business. Maintaining the highest level of security against these threats has always been a top priority for us. We are continually strengthening our systems to counter these threats as they evolve.”
The group known as Conti is said to be behind the attack, the U.K.’s The Times reported, leaking the details of the brand’s high-end clientele to the dark web.
In a September press release, the Cybersecurity and Infrastructure Security Agency said it and the Federal Bureau of Investigation had seen an increase in the use of Conti ransomware in more than 400 attacks on U.S. and international organizations.
Earlier this year, the FBI said it had identified at least 16 Conti ransomware attacks that targeted healthcare and first responder networks in the U.S.
Related stories will be right here …
Ransomware is malware that uses encryption to hold a victim’s system or personal files and demands payment to get them back.
For most people involved in the Graff data breach, it included details like their name and potentially their home address—which can be retrieved in the public domain from other sources– rather than any other confidential details that would put them at risk of identity theft.
A Graff spokesperson said the brand informed “the small group of individuals whose personal data was compromised to such an extent” and advised them on the appropriate steps to take.
The brand’s security systems alerted it to the activity, allowing it to react quickly and shut down its network.
Graff said it has been working with the U.K.’s Information Commissioner’s Office and relevant law enforcement on the incident.
“Thanks to our robust back-up facilities we were able to rebuild and restart our systems within days - crucially with no irretrievable loss of data,” the spokesperson said.
“Sadly, it appears that notable brands, corporations and even government departments are deliberately targeted by unscrupulous operators to extort money, cause disruption or simply embarrassment. Cybercrime continues to rise in scale and complexity. It is a threat to every business. Maintaining the highest level of security against these threats has always been a top priority for us. We are continually strengthening our systems to counter these threats as they evolve.”
The group known as Conti is said to be behind the attack, the U.K.’s The Times reported, leaking the details of the brand’s high-end clientele to the dark web.
In a September press release, the Cybersecurity and Infrastructure Security Agency said it and the Federal Bureau of Investigation had seen an increase in the use of Conti ransomware in more than 400 attacks on U.S. and international organizations.
Earlier this year, the FBI said it had identified at least 16 Conti ransomware attacks that targeted healthcare and first responder networks in the U.S.
While the hacks that tend to make headlines are the bigger ones, small businesses should also protect themselves against such crimes.
The Jewelers’ Security Alliance recommends the following actions to prevent cybercrime.
1. Have proper firewalls, anti-virus, and anti-malware for all systems, and keep them up to date.
2. Don’t let employees use company internet-connected devices at work for personal use or download software without permission. Additionally, don’t let them introduce personal memory sticks into a company system.
3. Have strong, unique passwords.
4. Beware of phishing. One of the main pathways for cyber criminals is to lead someone to open and click on a link in an email which will unleash malware to penetrate the system, JSA said.
So, don’t open or click on unknown or suspicious emails. Even emails from people and customers or vendors that might seem familiar can be spoof emails or from someone who has obtained an email address only slightly different from a real email address.
Additionally, look for unfamiliar foreign domains, misspellings, and other anomalies.
5. Beware of social engineering, which is obtaining confidential information by manipulating and/or deceiving people.
Criminals can obtain information on company personnel, customers, ordering, shipping procedures, payment methods, and other information for a fraudulent transaction through impersonation, email correspondence, research on social media, or other means.
So, be careful of the information provided to the public by email, website, social media, or phone.
Also, confirm the identity of the person to whom you are talking. If the interaction includes a transaction, call the known customer on the telephone to confirm there hasn’t been fraudulent impersonation.
6. Avoid visiting questionable and risky sites.
7. Don’t download questionable apps from obscure or unknown companies.
8. Have a written cyber security policy that employees must read and sign.
9. Have regular staff meetings and periodic reviews of cyber protocols for the business.
Editors' Picks
Sponsored by
More on Crime
The Latest
SourcingAug 27, 2026
OFAC Renews License Allowing Import of ‘Grandfathered’ Russian Diamonds General License 104B supersedes General License 104A, which was set to expire on Sept. 1.
SurveysAug 26, 2026
5 Jewelry Insights From The RealReal’s Resale ReportThe report delves into trending styles, the most popular jewelry brands by city, and why Belle Époque jewelry could be the next big thing.
SourcingAug 26, 2026
AGTA Now Requiring Members to Call Lab-Grown Gems ‘Synthetic’The association added the requirement to its revised "Code of Ethics" and released the 17th edition of its “Gemstone Information Manual.”
Brought to you by
Your Piece Could Be the One Editors Talk AboutSubmit your pieces for a chance to win in this year's competition.
SurveysAug 26, 2026
Consumer Confidence Dips in August Amid Anticipatory Anxieties Respondents were concerned about the future of the labor market and their income as well as the rising prices of gas and groceries.
Weekly QuizAug 20, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
TrendsAug 26, 2026
Boucheron’s New Campaign Celebrates Its ‘Question Mark’ NecklacesThe campaign highlights the asymmetrical high jewelry necklace style that the jeweler first created in 1879.
Events & AwardsAug 26, 2026
Harry Winston Exhibition to Open in ShanghaiIt will explore the life of “The King of Diamonds” and showcase more than 165 creations from the brand.
Brought to you by
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying EventsRetailers are seeking new ways to attract customers, increase traffic, and create revenue – Estate buying events are a popular solution.
ColumnistsAug 25, 2026
Proof Before Purchase: The Gen Z Way to BuyIn her first column for National Jeweler, Jennifer Shaheen asks jewelers if they know how to connect with the next generation of consumers.
Events & AwardsAug 25, 2026
SSEF Opens 2026 Applications for Gemology Education ScholarshipsThe annual awards cover tuition for an on-site educational course at the Swiss lab, as well as flights and lodging.
TrendsAug 25, 2026
Brent Neale Celebrates Blackberry Farm’s Anniversary With JewelryThe jeweler partnered with the Tennessee resort to honor its 50th anniversary with limited-edition blackberry pendants and earrings.
EditorsAug 24, 2026
Q&A: Reeds Jewelers VP Genna Zimmer on 80 Years in BusinessThe third-generation jeweler shared how the North Carolina retailer is celebrating this milestone and the love story that started it all.
Events & AwardsAug 24, 2026
Rio Grande, MetalWerx Host Argentium Silver WorkshopThe class, led by renowned metalsmith Cynthia Eid, highlighted Argentium silver as an alternative to gold amid high prices.
Events & AwardsAug 24, 2026
JIS Miami Opens Fall 2026 RegistrationThe show is slated for Oct. 16-19 at the Miami Beach Convention Center.
CollectionsAug 24, 2026
Francesca Villa Honors Napoleon, His Empresses In New CapsuleThe “Empresses” capsule uses 19th-century medals depicting Napoleon, Joséphine, and Marie-Louise across five one-of-a-kind pieces.
SurveysAug 21, 2026
These Are 2026’s Hottest Retailers, Says NRFThe retailers at the top of the list offer affordable products and fun, discovery-fueled experiences.
WatchesAug 21, 2026
Bremont Names Former Vacheron Constantin Exec CMODaniel Bing was formerly the marketing director for the Americas at Vacheron Constantin.
CollectionsAug 21, 2026
Bijules, Kamyen Serve Up ‘Topspin’ Tennis Bracelet Ahead of US OpenIn our Piece of the Week, the designers reimagine the tennis bracelet with green enamel wrapped around a strand of “Desert Diamonds.”
PodcastsAug 20, 2026
Episode 8: Diamond Industry Update With David Bonaparte & Ronnie VanderLindenThe industry veterans join the podcast to discuss diamond marketing, the FTC Jewelry Guides, and lobbying for lower tariffs.
TechnologyAug 20, 2026
A New AI-Powered Gemstone Identification App Is HereFounder Vik Westermann said the app is a “starting point” to inspire people to work with appraisers and gem labs, not replace them.
AuctionsAug 20, 2026
Storied Unicorn Brooch Up for Auction Gallops to New Home The Verdura brooch, which belonged to the late Virginia Fortune Ryan Ogilvy, was sold to a private collector in Asia.
Events & AwardsAug 20, 2026
MJSA Education Foundation Names 5 Scholarship WinnersThe five students were awarded a total of $10,000 through the nonprofit’s 2026 “Future of Jewelry Making” scholarship.
MajorsAug 20, 2026
Plumb Club Elects 2026-2027 BoardSteven Lerche is now beginning his term as the youngest member to become president of The Plumb Club’s elected executive committee.
MajorsAug 19, 2026
Mike Alexander To Succeed Scott Murphy as Jewelers Mutual CEO Murphy will retire at the end of the year and Alexander, currently the company’s president, will take over at the start of 2027.
Policies & IssuesAug 19, 2026
Spinelli Kilcollin Embraces Dupes With Trade-In ProgramThe jeweler is encouraging customers who own lookalike rings to come into the store and trade them for credit towards an authentic piece.
MajorsAug 19, 2026
Zales Wants You to Wear Fine Jewelry Every DayThe new campaign, “You Are The Occasion,” discourages shoppers from saving their fine jewelry for special occasions only.
SourcingAug 19, 2026
Vasant Mehta, a Dedicated Diamond Industry Leader, Dies at 81Mehta led India’s GJEPC through the 2008 financial crisis and was respected worldwide for his wisdom, integrity, and knowledge.
