CrimeJun 30, 2022
What JSA’s Annual Report Tells Us About Jewelry Crime in 2021TechnologyJul 12, 2022
Graff’s Ransomware Payment Not an Unusual Move, Expert Says
The high-end jeweler reportedly paid a $7.5 million ransom to a group of hackers and is suing its insurance company to cover the loss.
London—Graff Diamonds reportedly paid a $7.5 million ransom in Bitcoin to the hackers responsible for a ransomware attack on its systems last fall, a decision that is not unusual for large companies today, one expert says.
Ransomware is malware that uses encryption to hold a victim’s system or personal data hostage, basically, and demands payment to get them back.
Following the attack on Graff, Conti, the group that took credit for it, leaked data about the brand’s clients, such as their names and, potentially, their home addresses.
Graff counts many high-end clients and celebrities as customers, and the data breach included leaked data about the royal families in Saudi Arabia, the United Arab Emirates, and Qatar, prompting Conti to issue an apology to the families involved, an unusual move for the group.
Conti threatened to leak more of Graff’s data if the ransom wasn’t paid.
Though it tried to avoid paying, the high-end jeweler eventually offered $7.5 million, half the original ransom amount, and Conti accepted, according to Bloomberg, which broke the story. The jeweler paid in Bitcoin.
Graff is also suing its insurance company, The Travelers Companies Inc., in a London court for the losses, arguing that its policy should cover the ransom payment.
“The criminals threatened targeted publication of our customers’ private purchases. We were determined to take all possible steps to protect their interests and so negotiated a payment that successfully neutralized that threat,” a Graff spokesperson told National Jeweler.
“Regrettably, these commercial decisions are all too common these days. Insurers know this, which is why we are extremely frustrated and disappointed by Travelers’ attempt to avoid settlement of this insured risk. They have left us with no option but to bring these recovery proceedings at the High Court.”
The Travelers Companies did not respond to a request for comment by press time.
Related stories will be right here …
Ransomware is malware that uses encryption to hold a victim’s system or personal data hostage, basically, and demands payment to get them back.
Following the attack on Graff, Conti, the group that took credit for it, leaked data about the brand’s clients, such as their names and, potentially, their home addresses.
Graff counts many high-end clients and celebrities as customers, and the data breach included leaked data about the royal families in Saudi Arabia, the United Arab Emirates, and Qatar, prompting Conti to issue an apology to the families involved, an unusual move for the group.
Conti threatened to leak more of Graff’s data if the ransom wasn’t paid.
Though it tried to avoid paying, the high-end jeweler eventually offered $7.5 million, half the original ransom amount, and Conti accepted, according to Bloomberg, which broke the story. The jeweler paid in Bitcoin.
Graff is also suing its insurance company, The Travelers Companies Inc., in a London court for the losses, arguing that its policy should cover the ransom payment.
“The criminals threatened targeted publication of our customers’ private purchases. We were determined to take all possible steps to protect their interests and so negotiated a payment that successfully neutralized that threat,” a Graff spokesperson told National Jeweler.
“Regrettably, these commercial decisions are all too common these days. Insurers know this, which is why we are extremely frustrated and disappointed by Travelers’ attempt to avoid settlement of this insured risk. They have left us with no option but to bring these recovery proceedings at the High Court.”
The Travelers Companies did not respond to a request for comment by press time.
Shayne Caffrey, marketing manager and cybersecurity awareness training lead for LeeShanok Network Solutions, echoed what Graff Diamonds said it its statement—ransom payouts like this are fairly common today.
“Deciding whether to pay the ransom is a cost/benefit analysis. It can make a lot of sense to pay up when you can’t safely restore from a backup,” he said in an email to National Jeweler.
Once a business does decide to pay, it becomes a negotiation, going back and forth on price like in any deal until it becomes worth it for both sides.
“In this case, the initial $15 million demand may not have been worth it, but $7.5 million was,” Caffrey said. “Hackers would rather get something than nothing. This calculated approach means ransoms get paid more often than any of us would like.”
He also noted there’s rarely a guarantee that hackers will unencrypt the data even once the ransom is paid.
Caffey offered businesses two recommendations to reduce the chances of becoming a victim of cybercrime.
The first is to require every employee to undergo cybersecurity awareness training annually, with a particular focus on phishing prevention.
According to IBM, 95 percent of breaches result from human error, and the only way to fix that is through education, he noted.
But rather than using the common online training modules, Caffrey suggested bringing in a cybersecurity expert to deliver a live training, either in-person or virtually.
“In my experience, those trainings are much stickier.”
The second tip is to create a strong Backup and Disaster Recovery (BCDR) Strategy.
“Implementing these strategies can seem expensive on the surface, but they are often a fraction of the cost of paying a ransom, or even paying increased insurance premiums after a breach,” Caffrey said.
“Plus, it feels a lot better to restore your environment to a pre-ransomware instance than to reward the hackers by paying a ransom.”
More tips businesses can use to protect themselves from the Jewelers Security Alliance can be found in National Jeweler’s original story reporting on the Graff attack.
Editors' Picks
Sponsored by
More on Technology
The Latest
SourcingOct 05, 2026
De Beers to Take Full Ownership of Gahcho KuéIt is the last fully operational diamond mine in Canada following the recent closures of Ekati and Diavik.
AuctionsOct 05, 2026
The Star Cats of the Sandy Lerner AuctionThese jewels stood out at Bonhams’ sale of the cat-loving tech entrepreneur’s collection of objects depicting the feline form.
CollectionsOct 05, 2026
Sorellina Writes Another Love Letter for ‘Postscript’ CollectionThe fine jewelry brand has expanded the collection that debuted at Couture with four new designs based on its most popular styles.
Brought to you by
Meet Gemology’s Next Generation Microscope: GIA® Gemolite® NXT Professional EditionExperience gemstones with greater precision and comfort than ever before.
SourcingOct 05, 2026
Bruce Bridges Joins CIBJO BoardThe AGTA president was elected for a two-year term on the board of directors.
Weekly QuizOct 01, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
SourcingOct 02, 2026
De Beers, National Geographic Society Renew Okavango Eternal Partnership The partnership, a pledge to protect Africa’s Okavango River Basin, has been extended for an additional five years.
MajorsOct 02, 2026
Pandora Opens New $150M Manufacturing Facility in VietnamThe new facility, its first outside of Thailand, will boost its manufacturing capacity by 50 percent.
Brought to you by
Your Piece Could Be the One Editors Talk AboutSubmit your pieces for a chance to win in this year's competition.
TrendsOct 02, 2026
Hearts On Fire Celebrates 30th Anniversary With Heart PendantThe special-edition “Dream” pendant, our Piece of the Week, was created to mark Hearts On Fire’s 30-year milestone with 30 diamonds.
CrimeOct 01, 2026
Police Looking for 4 Suspects in $600K Smash-and-Grab RobberyDubai Jewelers in Springfield, Virginia, was once again the target of an armed robbery.
SurveysOct 01, 2026
Rolex Ranks Among Most Recommended Brands in US, Survey Says YouGov’s 2026 U.S. Most Recommended Brands report’s out, and a fast-fashion giant is sitting at No. 1 while Rolex is just shy of the top 5.
SourcingOct 01, 2026
Columbia Gem House Opens ‘Cutting Toward Change’ FundraiserProceeds from its jewelry raffle will benefit an organization working in India to combat silicosis, a lung disease affecting stone cutters.
TrendsOct 01, 2026
Carolina Hurricanes’ Championship Ring Reveals Hidden Hockey Puck PendantThe rings, crafted by Jason of Beverly Hills, celebrate the hockey team’s Stanley Cup win with design elements that honor its traditions.
TrendsOct 01, 2026
Amanda’s Style File: October’s Color Range This roundup of birthstone jewelry for October features vibrant tourmalines and opals with personality.
SourcingSep 30, 2026
Botswana’s President, De Beers CEO Say Diamond Demand Is RecoveringPresident Duma Boko spoke at back-to-back events in the city last week, touting Botswana’s stability and the diamond “bounceback.”
CollectionsSep 30, 2026
Oscar Heyman’s Holiday Book Is ‘A Living Archive’ The catalog showcases 112 new, one-of-a-kind pieces amid highlights from the jeweler’s historic archive.
SourcingSep 30, 2026
Gemfields Posts $98.5M Loss, Writes Down Value of Ruby MineIts Montepuez Ruby Mining operation in Mozambique, which is not yielding enough high-quality rubies, has taken a $125 million hit.
SurveysSep 30, 2026
Consumer Confidence Falls to 12-Year Low in SeptemberThose surveyed were worried about the present and the future, with write-in responses mentioning high oil and gas prices.
Events & AwardsSep 30, 2026
Jewelers of America, JA New York to Host Networking EventThe event will take place on the evening of Oct. 26 in New York City.
IndependentsSep 29, 2026
Christy Bromberg, Longtime Gift Buyer for Underwood Jewelers, Dies at 68She is remembered for her joie de vivre, upbeat personality, genuine interest in other people, and love of the Alabama Crimson Tide.
AuctionsSep 29, 2026
Dionne Warwick’s Jewelry Goes Up for AuctionOnline bidding is open now for Julien’s sale of items owned by the “Walk On By” singer, whose final album comes out this fall.
Events & AwardsSep 29, 2026
Matt Stuller to Receive 2027 Gem Award for Lifetime AchievementThe founder and executive chairman of Stuller Inc. is being honored for his impact on the jewelry industry at the 25th annual Gem Awards.
ColumnistsSep 29, 2026
Your Holiday Marketing Has a Bridal Blind SpotDecember is the most popular month to propose, and jewelers need to keep that in mind when planning their holiday marketing.
AuctionsSep 29, 2026
If You Love Cats, This Jewelry Auction Is for YouCat ladies of the jewelry world, unite. Sandy Lerner’s collection of cat jewelry and other objects is going up for auction Wednesday.
CollectionsSep 28, 2026
De Beers London Drops Water-Inspired High Jewelry Collection“Vibrations” features several firsts for De Beers’ high jewelry, including the use of chalcedony and diamonds sourced from artisanal miners.
CollectionsSep 28, 2026
Jessica McCormack Turns to Classic Motif for New CollectionThe “Bows” collection features three interpretations of the bow motif designed with Georgian and Victorian influences.
Events & AwardsSep 28, 2026
Guy Borenstein, Troy Underwood Among the Professionals Honored at AGS Conclave 2026The American Gem Society recognized industry members, one Guild, and a law enforcement official for their contributions to jewelry.
