CrimeJun 30, 2022
What JSA’s Annual Report Tells Us About Jewelry Crime in 2021TechnologyJul 12, 2022
Graff’s Ransomware Payment Not an Unusual Move, Expert Says
The high-end jeweler reportedly paid a $7.5 million ransom to a group of hackers and is suing its insurance company to cover the loss.
London—Graff Diamonds reportedly paid a $7.5 million ransom in Bitcoin to the hackers responsible for a ransomware attack on its systems last fall, a decision that is not unusual for large companies today, one expert says.
Ransomware is malware that uses encryption to hold a victim’s system or personal data hostage, basically, and demands payment to get them back.
Following the attack on Graff, Conti, the group that took credit for it, leaked data about the brand’s clients, such as their names and, potentially, their home addresses.
Graff counts many high-end clients and celebrities as customers, and the data breach included leaked data about the royal families in Saudi Arabia, the United Arab Emirates, and Qatar, prompting Conti to issue an apology to the families involved, an unusual move for the group.
Conti threatened to leak more of Graff’s data if the ransom wasn’t paid.
Though it tried to avoid paying, the high-end jeweler eventually offered $7.5 million, half the original ransom amount, and Conti accepted, according to Bloomberg, which broke the story. The jeweler paid in Bitcoin.
Graff is also suing its insurance company, The Travelers Companies Inc., in a London court for the losses, arguing that its policy should cover the ransom payment.
“The criminals threatened targeted publication of our customers’ private purchases. We were determined to take all possible steps to protect their interests and so negotiated a payment that successfully neutralized that threat,” a Graff spokesperson told National Jeweler.
“Regrettably, these commercial decisions are all too common these days. Insurers know this, which is why we are extremely frustrated and disappointed by Travelers’ attempt to avoid settlement of this insured risk. They have left us with no option but to bring these recovery proceedings at the High Court.”
The Travelers Companies did not respond to a request for comment by press time.
Related stories will be right here …
Ransomware is malware that uses encryption to hold a victim’s system or personal data hostage, basically, and demands payment to get them back.
Following the attack on Graff, Conti, the group that took credit for it, leaked data about the brand’s clients, such as their names and, potentially, their home addresses.
Graff counts many high-end clients and celebrities as customers, and the data breach included leaked data about the royal families in Saudi Arabia, the United Arab Emirates, and Qatar, prompting Conti to issue an apology to the families involved, an unusual move for the group.
Conti threatened to leak more of Graff’s data if the ransom wasn’t paid.
Though it tried to avoid paying, the high-end jeweler eventually offered $7.5 million, half the original ransom amount, and Conti accepted, according to Bloomberg, which broke the story. The jeweler paid in Bitcoin.
Graff is also suing its insurance company, The Travelers Companies Inc., in a London court for the losses, arguing that its policy should cover the ransom payment.
“The criminals threatened targeted publication of our customers’ private purchases. We were determined to take all possible steps to protect their interests and so negotiated a payment that successfully neutralized that threat,” a Graff spokesperson told National Jeweler.
“Regrettably, these commercial decisions are all too common these days. Insurers know this, which is why we are extremely frustrated and disappointed by Travelers’ attempt to avoid settlement of this insured risk. They have left us with no option but to bring these recovery proceedings at the High Court.”
The Travelers Companies did not respond to a request for comment by press time.
Shayne Caffrey, marketing manager and cybersecurity awareness training lead for LeeShanok Network Solutions, echoed what Graff Diamonds said it its statement—ransom payouts like this are fairly common today.
“Deciding whether to pay the ransom is a cost/benefit analysis. It can make a lot of sense to pay up when you can’t safely restore from a backup,” he said in an email to National Jeweler.
Once a business does decide to pay, it becomes a negotiation, going back and forth on price like in any deal until it becomes worth it for both sides.
“In this case, the initial $15 million demand may not have been worth it, but $7.5 million was,” Caffrey said. “Hackers would rather get something than nothing. This calculated approach means ransoms get paid more often than any of us would like.”
He also noted there’s rarely a guarantee that hackers will unencrypt the data even once the ransom is paid.
Caffey offered businesses two recommendations to reduce the chances of becoming a victim of cybercrime.
The first is to require every employee to undergo cybersecurity awareness training annually, with a particular focus on phishing prevention.
According to IBM, 95 percent of breaches result from human error, and the only way to fix that is through education, he noted.
But rather than using the common online training modules, Caffrey suggested bringing in a cybersecurity expert to deliver a live training, either in-person or virtually.
“In my experience, those trainings are much stickier.”
The second tip is to create a strong Backup and Disaster Recovery (BCDR) Strategy.
“Implementing these strategies can seem expensive on the surface, but they are often a fraction of the cost of paying a ransom, or even paying increased insurance premiums after a breach,” Caffrey said.
“Plus, it feels a lot better to restore your environment to a pre-ransomware instance than to reward the hackers by paying a ransom.”
More tips businesses can use to protect themselves from the Jewelers Security Alliance can be found in National Jeweler’s original story reporting on the Graff attack.
Editors' Picks
Sponsored by
More on Technology
The Latest
SourcingSep 30, 2026
Botswana’s President, De Beers CEO Say Diamond Demand Is RecoveringPresident Duma Boko spoke at back-to-back events in the city last week, touting Botswana’s stability and the diamond “bounceback.”
CollectionsSep 30, 2026
Oscar Heyman’s Holiday Book Is ‘A Living Archive’ The catalog showcases 112 new, one-of-a-kind pieces amid highlights from the jeweler’s historic archive.
SourcingSep 30, 2026
Gemfields Posts $98.5M Loss, Writes Down Value of Ruby MineIts Montepuez Ruby Mining operation in Mozambique, which is not yielding enough high-quality rubies, has taken a $125 million hit.
Brought to you by
Meet Gemology’s Next Generation Microscope: GIA® Gemolite® NXT Professional EditionExperience gemstones with greater precision and comfort than ever before.
SurveysSep 30, 2026
Consumer Confidence Falls to 12-Year Low in SeptemberThose surveyed were worried about the present and the future, with write-in responses mentioning high oil and gas prices.
Weekly QuizSep 25, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
Events & AwardsSep 30, 2026
Jewelers of America, JA New York to Host Networking EventThe event will take place on the evening of Oct. 26 in New York City.
IndependentsSep 29, 2026
Christy Bromberg, Longtime Gift Buyer for Underwood Jewelers, Dies at 68She is remembered for her joie de vivre, upbeat personality, genuine interest in other people, and love of the Alabama Crimson Tide.
Brought to you by
Your Piece Could Be the One Editors Talk AboutSubmit your pieces for a chance to win in this year's competition.
AuctionsSep 29, 2026
Dionne Warwick’s Jewelry Goes Up for AuctionOnline bidding is open now for Julien’s sale of items owned by the “Walk On By” singer, whose final album comes out this fall.
Events & AwardsSep 29, 2026
Matt Stuller to Receive 2027 Gem Award for Lifetime AchievementThe founder and executive chairman of Stuller Inc. is being honored for his impact on the jewelry industry at the 25th annual Gem Awards.
ColumnistsSep 29, 2026
Your Holiday Marketing Has a Bridal Blind SpotDecember is the most popular month to propose, and jewelers need to keep that in mind when planning their holiday marketing.
AuctionsSep 29, 2026
If You Love Cats, This Jewelry Auction Is for YouCat ladies of the jewelry world, unite. Sandy Lerner’s collection of cat jewelry and other objects is going up for auction Wednesday.
CollectionsSep 28, 2026
De Beers London Drops Water-Inspired High Jewelry Collection“Vibrations” features several firsts for De Beers’ high jewelry, including the use of chalcedony and diamonds sourced from artisanal miners.
CollectionsSep 28, 2026
Jessica McCormack Turns to Classic Motif for New CollectionThe “Bows” collection features three interpretations of the bow motif designed with Georgian and Victorian influences.
Events & AwardsSep 28, 2026
Guy Borenstein, Troy Underwood Among the Professionals Honored at AGS Conclave 2026The American Gem Society recognized industry members, one Guild, and a law enforcement official for their contributions to jewelry.
FinancialsSep 28, 2026
Instappraise, Jewelers Mutual Look to Simplify Jewelry InsuranceThrough a new system integration, customers can now receive instant personal jewelry insurance quotes at the time of appraisal.
WatchesSep 25, 2026
Smaller Rolex Watches Showing Strength on Secondary Market, Data ShowsFive of the 10 fastest-appreciating Rolex models on Bob’s Watches were Datejust 31 or Lady Datejust watches.
MajorsSep 25, 2026
Sherwood Family Buys Back Daniel’s Jewelers from Private EquityThe Sherwood family and AJS Creations CEO Tejas Shah purchased the jewelry chain back from Palladium Equity Partners.
Lab-GrownSep 25, 2026
Brilliant Earth Collabs with Elizabeth Taylor Estate on Jewelry Collection“The Elizabeth Taylor Collection” uses lab-grown diamonds and gemstones in contemporary designs inspired by the icon.
TrendsSep 25, 2026
A Peek at Taylor Swift’s Game-Day DiamondsThe artist wore Dana Rebecca Designs’ marquise diamond-set gold hoops at the Chiefs game last Sunday. Now they’re our Piece of the Week.
CrimeSep 24, 2026
From Conclave: Security Measures Jewelers Should Be TakingJSA and Jewelers Mutual shared advice on spotting suspicious behavior, combatting cell phone jammers, and staying safe at home.
AuctionsSep 24, 2026
8-Carat Blue Diamond Heads to UK Jewelry AuctionThe fancy light blue diamond is estimated to fetch up to $2.6 million at Elmwood’s next week.
TrendsSep 24, 2026
This New Jewelry Book Decodes the Secret Meaning in Victorian Jewelry“Secret Language of Victorian Jewelry” unveils the meaning behind the symbols, motifs, and gemstones used in Victorian-era jewelry.
Lab-GrownSep 24, 2026
Kira Jewels Opens B2B E-Commerce Portal for Lab-Grown Diamond Jewelry KIRAJewels.one gives retailers access to more than 500 SKUs of lab-grown diamond rings, earrings, necklaces, and bracelets.
TrendsSep 23, 2026
Holiday Diamond Jewelry Trends: Layered Looks, PersonalizationThis holiday season, look to pieces that will help to fill out customers’ everyday diamond jewelry wardrobe, experts say.
SourcingSep 23, 2026
Organization That Promotes Natural Diamond Rebrands for Third Time The Natural Diamond Council is now The Diamond Collective and has announced a new strategy under CEO Amber Pepper.
