CrimeDec 09, 2020
In the Wake of the Cyberattack on Stuller, 5 Tips on CybersecurityCrimeNov 02, 2021
Graff Gets Hit by Ransomware Attack
The data breach included some personal details of high-end clients.
Graff is known for its high jewelry, counting celebrities and world leaders among its clients. Pictured here is the “New Dawn” necklace from Graff’s “Tribal” collection, featuring 64 total carats of diamonds in 18-karat white gold.
London—High-end jeweler Graff has become the victim of a ransomware attack.
Ransomware is malware that uses encryption to hold a victim’s system or personal files and demands payment to get them back.
For most people involved in the Graff data breach, it included details like their name and potentially their home address—which can be retrieved in the public domain from other sources– rather than any other confidential details that would put them at risk of identity theft.
A Graff spokesperson said the brand informed “the small group of individuals whose personal data was compromised to such an extent” and advised them on the appropriate steps to take.
The brand’s security systems alerted it to the activity, allowing it to react quickly and shut down its network.
Graff said it has been working with the U.K.’s Information Commissioner’s Office and relevant law enforcement on the incident.
“Thanks to our robust back-up facilities we were able to rebuild and restart our systems within days - crucially with no irretrievable loss of data,” the spokesperson said.
“Sadly, it appears that notable brands, corporations and even government departments are deliberately targeted by unscrupulous operators to extort money, cause disruption or simply embarrassment. Cybercrime continues to rise in scale and complexity. It is a threat to every business. Maintaining the highest level of security against these threats has always been a top priority for us. We are continually strengthening our systems to counter these threats as they evolve.”
The group known as Conti is said to be behind the attack, the U.K.’s The Times reported, leaking the details of the brand’s high-end clientele to the dark web.
In a September press release, the Cybersecurity and Infrastructure Security Agency said it and the Federal Bureau of Investigation had seen an increase in the use of Conti ransomware in more than 400 attacks on U.S. and international organizations.
Earlier this year, the FBI said it had identified at least 16 Conti ransomware attacks that targeted healthcare and first responder networks in the U.S.
Related stories will be right here …
Ransomware is malware that uses encryption to hold a victim’s system or personal files and demands payment to get them back.
For most people involved in the Graff data breach, it included details like their name and potentially their home address—which can be retrieved in the public domain from other sources– rather than any other confidential details that would put them at risk of identity theft.
A Graff spokesperson said the brand informed “the small group of individuals whose personal data was compromised to such an extent” and advised them on the appropriate steps to take.
The brand’s security systems alerted it to the activity, allowing it to react quickly and shut down its network.
Graff said it has been working with the U.K.’s Information Commissioner’s Office and relevant law enforcement on the incident.
“Thanks to our robust back-up facilities we were able to rebuild and restart our systems within days - crucially with no irretrievable loss of data,” the spokesperson said.
“Sadly, it appears that notable brands, corporations and even government departments are deliberately targeted by unscrupulous operators to extort money, cause disruption or simply embarrassment. Cybercrime continues to rise in scale and complexity. It is a threat to every business. Maintaining the highest level of security against these threats has always been a top priority for us. We are continually strengthening our systems to counter these threats as they evolve.”
The group known as Conti is said to be behind the attack, the U.K.’s The Times reported, leaking the details of the brand’s high-end clientele to the dark web.
In a September press release, the Cybersecurity and Infrastructure Security Agency said it and the Federal Bureau of Investigation had seen an increase in the use of Conti ransomware in more than 400 attacks on U.S. and international organizations.
Earlier this year, the FBI said it had identified at least 16 Conti ransomware attacks that targeted healthcare and first responder networks in the U.S.
While the hacks that tend to make headlines are the bigger ones, small businesses should also protect themselves against such crimes.
The Jewelers’ Security Alliance recommends the following actions to prevent cybercrime.
1. Have proper firewalls, anti-virus, and anti-malware for all systems, and keep them up to date.
2. Don’t let employees use company internet-connected devices at work for personal use or download software without permission. Additionally, don’t let them introduce personal memory sticks into a company system.
3. Have strong, unique passwords.
4. Beware of phishing. One of the main pathways for cyber criminals is to lead someone to open and click on a link in an email which will unleash malware to penetrate the system, JSA said.
So, don’t open or click on unknown or suspicious emails. Even emails from people and customers or vendors that might seem familiar can be spoof emails or from someone who has obtained an email address only slightly different from a real email address.
Additionally, look for unfamiliar foreign domains, misspellings, and other anomalies.
5. Beware of social engineering, which is obtaining confidential information by manipulating and/or deceiving people.
Criminals can obtain information on company personnel, customers, ordering, shipping procedures, payment methods, and other information for a fraudulent transaction through impersonation, email correspondence, research on social media, or other means.
So, be careful of the information provided to the public by email, website, social media, or phone.
Also, confirm the identity of the person to whom you are talking. If the interaction includes a transaction, call the known customer on the telephone to confirm there hasn’t been fraudulent impersonation.
6. Avoid visiting questionable and risky sites.
7. Don’t download questionable apps from obscure or unknown companies.
8. Have a written cyber security policy that employees must read and sign.
9. Have regular staff meetings and periodic reviews of cyber protocols for the business.
Editors' Picks
Sponsored by
More on Crime
The Latest
PodcastsSep 16, 2026
Episode 9: Remembering Cindy EdelsteinTwo special guests join the podcast to commemorate the 10th anniversary of the designer advocate, mentor, and author’s untimely passing.
CollectionsSep 16, 2026
Jessica McCormack, L’Objet Collab on Homewares CollectionMcCormack brings sea-inspired motifs from her “Beaches” collection to L’Objet’s tableware, vanity pieces, and first-ever cutlery set.
IndependentsSep 16, 2026
Bromberg & Co. Names New PresidentMarlin “Brian” Hood, who has been with the store for 20 years, will succeed Ricky Bromberg, who died earlier this month.
Brought to you by
Meet Gemology’s Next Generation Microscope: GIA® Gemolite® NXT Professional EditionExperience gemstones with greater precision and comfort than ever before.
MajorsSep 16, 2026
Midas Chain Releases ‘House of Midas’ Bridal CatalogThe new bridal catalog features the latest jewelry collections and designs from timeless classics to modern silhouettes.
Weekly QuizSep 10, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
EditorsSep 15, 2026
2026 Emmys Jewelry: An Either/Or Proposition Stars wore either a necklace or earrings at 78th Primetime Emmy Awards but rarely both, Natalie Francisco notes.
ColumnistsSep 15, 2026
The Levels Your Website Must Clear Before AI Recommends YouJennifer Shaheen compares this new era of AI-powered SEO to a video game: your website must clear one level before advancing to the next.
Brought to you by
Your Piece Could Be the One Editors Talk AboutSubmit your pieces for a chance to win in this year's competition.
IndependentsSep 15, 2026
Armadani Launches Retail Support Program for Holiday SeasonThe program highlights “Made in Italy” fine jewelry with digital merchandising, sales education, and local marketing support.
EditorsSep 15, 2026
Q&A: Signet Jewelers’ Joan Hilson on Diamond Demand, the HolidaysHilson, Signet’s chief operating and financial officer, discussed Q2, resurgent natural diamond demand, and why Blue Nile is a standout.
ColumnistsSep 14, 2026
Sherry Smith: Stop Waiting for December to Save Your ChristmasThe stores that have a great December are the ones that made good decisions in August, September, and October, Sherry Smith writes.
AuctionsSep 14, 2026
22 Carats of ‘Sunshine’ Are Up for AuctionThe 22.09-carat fancy yellow “Pragnell Kimberley Sunshine Diamond” is part of the fall jewelry sale at Heritage Auctions.
IndependentsSep 14, 2026
Greenwich St. Jewelers to Unveil Photography Exhibition“Adornos: Jewelry, Memory & What We Pass Down” honors the jewelry’s importance to New York City’s Latine communities.
SourcingSep 14, 2026
Gemfields Sells All Lots at First Emerald Auction in 9 MonthsThe company’s managing director of sales said the results demonstrate “continued strong demand for commercial-quality emeralds.”
SourcingSep 14, 2026
Diamonds Do Good Pledges Support for Eye Care ProgramThe nonprofit awarded a grant to the Gift of Sight initiative spearheaded by South African musician Black Coffee.
CollectionsSep 11, 2026
A Sapphire ‘Stardust’ Ring From Greenwich St. Jewelers The Latine-owned New York jeweler is marking two milestones this year: its 50th anniversary and the 25th anniversary of the 9/11 attacks.
MajorsSep 11, 2026
The Wishing Place by JTV OpensThe jewelry retail broadcast network has sponsored a new space for Make-A-Wish East Tennessee on its campus in Knoxville.
Events & AwardsSep 11, 2026
The Edge Awards Scholarships to 2 Young Jewelry ProfessionalsThe recipients were recognized at the 24 Karat Club of the Southeastern United States’ annual banquet.
MajorsSep 10, 2026
Lagos Founder Steven Lagos Steps Down as CEO Keith Rolfe, CFO and COO of Lagos, is now at the jewelry brand’s helm while Steven takes on the role of executive chairman.
AuctionsSep 10, 2026
Massive Matched Pair of Paraíba Tourmalines Head to Sotheby’sThe “Kat Florence Luminas” will be offered together as one lot and could fetch up to $637,000.
SourcingSep 10, 2026
AGTA Announces 4 Newly Elected DirectorsFour directors were elected to the AGTA board and will serve three-year terms beginning in February.
AuctionsSep 10, 2026
Former Sotheby’s, Christie’s Exec Appointed CEO of Julien’s Auctions Ken Citron joins the celebrity memorabilia-focused auction house ahead of its first week-long series of events in Abu Dhabi.
FinancialsSep 09, 2026
Signet Jewelers to ‘Double Down’ on Blue Nile Amid Strong SalesThe jewelry retailer said it sees opportunity at higher price points, particularly in natural diamonds for bridal and fashion.
IndependentsSep 09, 2026
Sarah Leonard Fine Jewelers Closes After Nearly 80 YearsThe Los Angeles-based, family-owned jeweler was founded by Lenny and Sunny Friedman in 1946.
SourcingSep 09, 2026
Fura Gems Notes ‘Remarkable’ Interest in Larger Rubies at Latest SaleThe auction, held in Bangkok, was 96 percent sold by lot, with nearly 411,000 carats of Mozambiquan rubies sold.
MajorsSep 09, 2026
Stuller’s Latest Catalog Includes Its New Demi-Fine CollectionFine Jewelry 2027-2028 has more than 900 new styles, including silver, gold-filled, gold-plated sterling silver, and vermeil jewelry.
Policies & IssuesSep 09, 2026
8 Key Changes the FTC Made to the Jewelry Guides: A Refresher Learn more about the new terms for lab-grown diamonds and composite gemstones, and the major changes in store for precious metals jewelry.
