CrimeDec 09, 2020
In the Wake of the Cyberattack on Stuller, 5 Tips on CybersecurityCrimeNov 02, 2021
Graff Gets Hit by Ransomware Attack
The data breach included some personal details of high-end clients.
Graff is known for its high jewelry, counting celebrities and world leaders among its clients. Pictured here is the “New Dawn” necklace from Graff’s “Tribal” collection, featuring 64 total carats of diamonds in 18-karat white gold.
London—High-end jeweler Graff has become the victim of a ransomware attack.
Ransomware is malware that uses encryption to hold a victim’s system or personal files and demands payment to get them back.
For most people involved in the Graff data breach, it included details like their name and potentially their home address—which can be retrieved in the public domain from other sources– rather than any other confidential details that would put them at risk of identity theft.
A Graff spokesperson said the brand informed “the small group of individuals whose personal data was compromised to such an extent” and advised them on the appropriate steps to take.
The brand’s security systems alerted it to the activity, allowing it to react quickly and shut down its network.
Graff said it has been working with the U.K.’s Information Commissioner’s Office and relevant law enforcement on the incident.
“Thanks to our robust back-up facilities we were able to rebuild and restart our systems within days - crucially with no irretrievable loss of data,” the spokesperson said.
“Sadly, it appears that notable brands, corporations and even government departments are deliberately targeted by unscrupulous operators to extort money, cause disruption or simply embarrassment. Cybercrime continues to rise in scale and complexity. It is a threat to every business. Maintaining the highest level of security against these threats has always been a top priority for us. We are continually strengthening our systems to counter these threats as they evolve.”
The group known as Conti is said to be behind the attack, the U.K.’s The Times reported, leaking the details of the brand’s high-end clientele to the dark web.
In a September press release, the Cybersecurity and Infrastructure Security Agency said it and the Federal Bureau of Investigation had seen an increase in the use of Conti ransomware in more than 400 attacks on U.S. and international organizations.
Earlier this year, the FBI said it had identified at least 16 Conti ransomware attacks that targeted healthcare and first responder networks in the U.S.
Related stories will be right here …
Ransomware is malware that uses encryption to hold a victim’s system or personal files and demands payment to get them back.
For most people involved in the Graff data breach, it included details like their name and potentially their home address—which can be retrieved in the public domain from other sources– rather than any other confidential details that would put them at risk of identity theft.
A Graff spokesperson said the brand informed “the small group of individuals whose personal data was compromised to such an extent” and advised them on the appropriate steps to take.
The brand’s security systems alerted it to the activity, allowing it to react quickly and shut down its network.
Graff said it has been working with the U.K.’s Information Commissioner’s Office and relevant law enforcement on the incident.
“Thanks to our robust back-up facilities we were able to rebuild and restart our systems within days - crucially with no irretrievable loss of data,” the spokesperson said.
“Sadly, it appears that notable brands, corporations and even government departments are deliberately targeted by unscrupulous operators to extort money, cause disruption or simply embarrassment. Cybercrime continues to rise in scale and complexity. It is a threat to every business. Maintaining the highest level of security against these threats has always been a top priority for us. We are continually strengthening our systems to counter these threats as they evolve.”
The group known as Conti is said to be behind the attack, the U.K.’s The Times reported, leaking the details of the brand’s high-end clientele to the dark web.
In a September press release, the Cybersecurity and Infrastructure Security Agency said it and the Federal Bureau of Investigation had seen an increase in the use of Conti ransomware in more than 400 attacks on U.S. and international organizations.
Earlier this year, the FBI said it had identified at least 16 Conti ransomware attacks that targeted healthcare and first responder networks in the U.S.
While the hacks that tend to make headlines are the bigger ones, small businesses should also protect themselves against such crimes.
The Jewelers’ Security Alliance recommends the following actions to prevent cybercrime.
1. Have proper firewalls, anti-virus, and anti-malware for all systems, and keep them up to date.
2. Don’t let employees use company internet-connected devices at work for personal use or download software without permission. Additionally, don’t let them introduce personal memory sticks into a company system.
3. Have strong, unique passwords.
4. Beware of phishing. One of the main pathways for cyber criminals is to lead someone to open and click on a link in an email which will unleash malware to penetrate the system, JSA said.
So, don’t open or click on unknown or suspicious emails. Even emails from people and customers or vendors that might seem familiar can be spoof emails or from someone who has obtained an email address only slightly different from a real email address.
Additionally, look for unfamiliar foreign domains, misspellings, and other anomalies.
5. Beware of social engineering, which is obtaining confidential information by manipulating and/or deceiving people.
Criminals can obtain information on company personnel, customers, ordering, shipping procedures, payment methods, and other information for a fraudulent transaction through impersonation, email correspondence, research on social media, or other means.
So, be careful of the information provided to the public by email, website, social media, or phone.
Also, confirm the identity of the person to whom you are talking. If the interaction includes a transaction, call the known customer on the telephone to confirm there hasn’t been fraudulent impersonation.
6. Avoid visiting questionable and risky sites.
7. Don’t download questionable apps from obscure or unknown companies.
8. Have a written cyber security policy that employees must read and sign.
9. Have regular staff meetings and periodic reviews of cyber protocols for the business.
Editors' Picks
Sponsored by
More on Crime
The Latest
IndependentsOct 14, 2026
Retailer Hall of Fame 2026: Coleman and Mitchell ClarkFourth-generation jewelers Coleman and Mitchell Clark exemplify the best qualities of their predecessors: humility, modesty, and confidence.
SourcingOct 14, 2026
Manuel Marcial de Gomar, ‘The Emerald Whisperer,’ Dies at 90The gem hunter, whose 70-year career was defined by adventure and exploration, is remembered for his steadfast faith and sense of wonder.
FinancialsOct 14, 2026
LVMH’s Jewelry Brands Turn in ‘Very Good’ Performance in Q3 Tiffany & Co. continued its full-scale store renovation project while Bulgari’s high jewelry collection generated “record-breaking revenue.”
Brought to you by
Meet Gemology’s Next Generation Microscope: GIA® Gemolite® NXT Professional EditionExperience gemstones with greater precision and comfort than ever before.
Events & AwardsOct 14, 2026
Chicago Responsible Jewelry Conference Releases 2026 ProgramThis year’s sessions feature leading voices from human rights, legal, and conservation organizations.
Weekly QuizOct 08, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
MajorsOct 13, 2026
David Webb Owner Purchases Lugano JewelryThe high-end jewelry retailer was sold to private investment firm Middle West Partners and a group of longtime clients.
Lab-GrownOct 13, 2026
Stephanie Gottlieb Takes Lab-Grown Diamond Collection WholesaleThe jewelry designer has partnered with Sofer Jewelry to distribute her 85-piece lab-grown diamond collection.
Brought to you by
Your Piece Could Be the One Editors Talk AboutSubmit your pieces for a chance to win in this year's competition.
IndependentsOct 13, 2026
Retailer Hall of Fame 2026: Sean DunnDunn, this year’s Single-Store Independent inductee, is passionate about innovation and telling the story of natural diamonds.
AuctionsOct 13, 2026
Christie's Geneva To Auction 'Bulgari Pink' DiamondThe 24-carat fancy intense pink diamond ring could fetch up to $18 million at the November sale.
IndependentsOct 13, 2026
Greenwich St. Jewelers’ New Candle Smells Like HomeThe “Island Jewel” candle honors New York City and Puerto Rico and raises money for the island’s water relief efforts.
TechnologyOct 13, 2026
GemFind Is a New JA Member Benefit Partner The partnership will give JA members access to preferred pricing, exclusive benefits, technology solutions, education, and resources.
SurveysOct 09, 2026
These Will Be the 10 Busiest Days for In-Store Shopping This Holiday SeasonStores should expect to see the most customers on Nov. 27, and Christmas week is expected to be hectic too, as Dec. 25 falls on a Friday.
CollectionsOct 09, 2026
Elisa Solomon Collabs With Serendipity 3 on ‘Frozen Hot Chocolate’ CharmThe charm, our Piece of the Week, features brown diamond frozen hot chocolate topped with white diamond whipped cream and a ruby straw.
AuctionsOct 09, 2026
8-Carat Blue Diamond Goes Unsold at UK Jewelry Auction The top lot of Elmwood’s recent fine jewelry sale in London was a 1.84-carat, D color Tiffany & Co. solitaire diamond ring.
WatchesOct 09, 2026
Movado to Sell Majority Stake in Ebel for $66.5MThe watch company agreed to sell a 95 percent interest to a group comprised of F.P. Journe, Chanel, and Swiss watch exec Pierre Jacques.
Policies & IssuesOct 08, 2026
Third Wave of IEEPA Tariff Refunds Begins This round of tariff refunds is for importers that have sued over IEEPA tariffs in the Court of International Trade and won.
CollectionsOct 08, 2026
Brent Neale’s New Collection Goes ‘Back to Basics’It revisits the brand’s most requested silhouettes, from "Pillow"-set necklaces and bracelets to "Signature"-set rings and earrings.
SourcingOct 08, 2026
Ethical Gem Fair Heads Back to BrooklynThe trade-only event includes buying opportunities as well as educational sessions on artisanal mining, the new Paraíba source, and more.
Events & AwardsOct 08, 2026
Pattons Fine Jewelry Sweeps Local Design ContestAra Chanakian, a jeweler at Pattons, took home top honors in every category at Jewelers of Louisiana’s annual jewelry design competition.
AuctionsOct 08, 2026
Reba McEntire’s Jewelry, Watches Head to Julien’s AuctionsThe live charity benefit sale in Nashville will also feature gowns, boots, and other memorabilia from the country music legend.
Supplier BulletinOct 08, 2026
Overnight Mountings’ Bridal Builder Helps Jewelers Turn Custom Design into a Hands-On Selling ExperienceSponsored by Overnight Mountings
Policies & IssuesOct 07, 2026
The Plumb Club Amplifies Its Voice as Geopolitical Pressures MountThe supplier organization recently joined JA and JVC to have more input on political issues affecting the jewelry industry.
CollectionsOct 07, 2026
Blue Nile, Royal Asscher Collection Highlights Natural Diamond BeautyBlue Nile, a Signet Jewelers-owned brand, is now Royal Asscher’s exclusive licensed retailer in North America.
CollectionsOct 07, 2026
4 Standout Pieces in Audemars Piguet’s First High Jewelry Collection “Royal Oak” pays homage to the brand’s most popular watch model using 18-karat gold as well as diamonds, emeralds, and sapphires.
MajorsOct 07, 2026
Empire Safe & Vault Promotes Juan Morales to CEOAs part of the transition, Joseph Nicosia has stepped into the role of COO.
SourcingOct 07, 2026
AGTA Extends Deadline for 2026 Spectrum Awards EntriesParticipants now have until Oct. 14 to complete their submissions.
