CrimeJun 30, 2022
What JSA’s Annual Report Tells Us About Jewelry Crime in 2021TechnologyJul 12, 2022
Graff’s Ransomware Payment Not an Unusual Move, Expert Says
The high-end jeweler reportedly paid a $7.5 million ransom to a group of hackers and is suing its insurance company to cover the loss.
London—Graff Diamonds reportedly paid a $7.5 million ransom in Bitcoin to the hackers responsible for a ransomware attack on its systems last fall, a decision that is not unusual for large companies today, one expert says.
Ransomware is malware that uses encryption to hold a victim’s system or personal data hostage, basically, and demands payment to get them back.
Following the attack on Graff, Conti, the group that took credit for it, leaked data about the brand’s clients, such as their names and, potentially, their home addresses.
Graff counts many high-end clients and celebrities as customers, and the data breach included leaked data about the royal families in Saudi Arabia, the United Arab Emirates, and Qatar, prompting Conti to issue an apology to the families involved, an unusual move for the group.
Conti threatened to leak more of Graff’s data if the ransom wasn’t paid.
Though it tried to avoid paying, the high-end jeweler eventually offered $7.5 million, half the original ransom amount, and Conti accepted, according to Bloomberg, which broke the story. The jeweler paid in Bitcoin.
Graff is also suing its insurance company, The Travelers Companies Inc., in a London court for the losses, arguing that its policy should cover the ransom payment.
“The criminals threatened targeted publication of our customers’ private purchases. We were determined to take all possible steps to protect their interests and so negotiated a payment that successfully neutralized that threat,” a Graff spokesperson told National Jeweler.
“Regrettably, these commercial decisions are all too common these days. Insurers know this, which is why we are extremely frustrated and disappointed by Travelers’ attempt to avoid settlement of this insured risk. They have left us with no option but to bring these recovery proceedings at the High Court.”
The Travelers Companies did not respond to a request for comment by press time.
Related stories will be right here …
Ransomware is malware that uses encryption to hold a victim’s system or personal data hostage, basically, and demands payment to get them back.
Following the attack on Graff, Conti, the group that took credit for it, leaked data about the brand’s clients, such as their names and, potentially, their home addresses.
Graff counts many high-end clients and celebrities as customers, and the data breach included leaked data about the royal families in Saudi Arabia, the United Arab Emirates, and Qatar, prompting Conti to issue an apology to the families involved, an unusual move for the group.
Conti threatened to leak more of Graff’s data if the ransom wasn’t paid.
Though it tried to avoid paying, the high-end jeweler eventually offered $7.5 million, half the original ransom amount, and Conti accepted, according to Bloomberg, which broke the story. The jeweler paid in Bitcoin.
Graff is also suing its insurance company, The Travelers Companies Inc., in a London court for the losses, arguing that its policy should cover the ransom payment.
“The criminals threatened targeted publication of our customers’ private purchases. We were determined to take all possible steps to protect their interests and so negotiated a payment that successfully neutralized that threat,” a Graff spokesperson told National Jeweler.
“Regrettably, these commercial decisions are all too common these days. Insurers know this, which is why we are extremely frustrated and disappointed by Travelers’ attempt to avoid settlement of this insured risk. They have left us with no option but to bring these recovery proceedings at the High Court.”
The Travelers Companies did not respond to a request for comment by press time.
Shayne Caffrey, marketing manager and cybersecurity awareness training lead for LeeShanok Network Solutions, echoed what Graff Diamonds said it its statement—ransom payouts like this are fairly common today.
“Deciding whether to pay the ransom is a cost/benefit analysis. It can make a lot of sense to pay up when you can’t safely restore from a backup,” he said in an email to National Jeweler.
Once a business does decide to pay, it becomes a negotiation, going back and forth on price like in any deal until it becomes worth it for both sides.
“In this case, the initial $15 million demand may not have been worth it, but $7.5 million was,” Caffrey said. “Hackers would rather get something than nothing. This calculated approach means ransoms get paid more often than any of us would like.”
He also noted there’s rarely a guarantee that hackers will unencrypt the data even once the ransom is paid.
Caffey offered businesses two recommendations to reduce the chances of becoming a victim of cybercrime.
The first is to require every employee to undergo cybersecurity awareness training annually, with a particular focus on phishing prevention.
According to IBM, 95 percent of breaches result from human error, and the only way to fix that is through education, he noted.
But rather than using the common online training modules, Caffrey suggested bringing in a cybersecurity expert to deliver a live training, either in-person or virtually.
“In my experience, those trainings are much stickier.”
The second tip is to create a strong Backup and Disaster Recovery (BCDR) Strategy.
“Implementing these strategies can seem expensive on the surface, but they are often a fraction of the cost of paying a ransom, or even paying increased insurance premiums after a breach,” Caffrey said.
“Plus, it feels a lot better to restore your environment to a pre-ransomware instance than to reward the hackers by paying a ransom.”
More tips businesses can use to protect themselves from the Jewelers Security Alliance can be found in National Jeweler’s original story reporting on the Graff attack.
More on Technology
The Latest
SourcingJul 02, 2026
London Diamond Bourse Elects First Female PresidentCharlotte Rose said her election is “a sign that this is an industry capable of change.”
Supplier BulletinJul 02, 2026
Elevating Retail Showcases with Today's Necklace & Bracelet TrendsSponsored by Rio Grande Jewelry Supply
TrendsJul 02, 2026
Oscar Heyman’s Flag Brooch Celebrates AmericaThe American jewelry house, founded by Latvian immigrants, has been creating American flag brooches since 1917.
Brought to you by
Wedding Band Trends 2026: Personalization Takes Center StageColored gemstones, artisan finishes, mixed metals, and meaningful details are shaping demand in bridal jewelry.
IndependentsJul 02, 2026
D. Geller & Son Partners with KSU Art Students on Store MuralThe artwork celebrates the Atlanta jeweler’s legacy and symbolizes its commitment to supporting local artists and its community.
Weekly QuizJul 01, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
Events & AwardsJul 02, 2026
Stratus Estate Buyers Offers Jewelers Turnkey Buying EventsIts team can evaluate jewelry and watches, as well as luxury handbags, artwork, and collectibles.
SurveysJul 01, 2026
Consumer Confidence Ticks Up in JuneFalling oil prices were a factor in the slight month-over-month improvement.
Brought to you by
Building the Future of Jewelry Retail: DCA Expands Education, Leadership Development, and Workforce SolutionsDCA is preparing the next generation of professionals by supporting workforce development, leadership growth, and career advancement.
CollectionsJul 01, 2026
Rio Grande Launches First Finished Bridal CollectionThe new offering comprises more than 120 bridal and engagement ring styles with natural and lab-grown diamonds.
WatchesJul 01, 2026
Rolex Unveils Clock at Rockefeller CenterThe clock is part of the celebration for the soon-to-open Rolex headquarters on New York City’s Fifth Avenue.
IndependentsJul 01, 2026
Kristen Cannon of Valobra Master Jewelers Dies at 49The public relations professional is remembered for her benevolent generosity and unwavering commitment to those around her.
WatchesJun 30, 2026
Pokémon Fans Will Want to Catch This New G-Shock WatchThe new watch commemorates Pokémon’s 30th anniversary.
MajorsJun 30, 2026
Saks Global Emerges From Bankruptcy With New NameThe luxury retailer is now called Exemplar Luxury Group.
CollectionsJun 30, 2026
Jade Ruzzo’s New Collection Embodies the Art of Being a LadyThe “Lady” collection is a new take on old beauty standards with gemstone-adorned hair pins and combs, a compact mirror necklace, and more.
SourcingJun 30, 2026
Blue Nile Introduces Montana Sapphire CollectionThe new line is included in the e-tailer’s curation of jewelry celebrating America’s 250th anniversary.
GradingJun 30, 2026
AGS Opens 2026 Recertification ExamAll active members who earned their credential or designation before Dec. 1, 2025, are required to recertify.
CollectionsJun 29, 2026
Briony Raymond’s New Collection Is a ‘Carousel’ of Hard StonesThe new jewelry collection uses a colorful palette of onyx, malachite, tiger’s eye, mother-of-pearl, lapis, turquoise, and coral.
IndependentsJun 29, 2026
Look Inside Lee Michaels’ Revamped Mississippi FlagshipLee Michaels Fine Jewelry is celebrating 30 years in the Ridgeland, Mississippi community.
GradingJun 29, 2026
National Rarities Announces New Gemology ManagerSean Milliner has joined the company.
GradingJun 29, 2026
GIA to Open New London CampusClasses will begin in August at GIA’s new Canary Wharf location.
AuctionsJun 26, 2026
‘Hogback’ Diamond Ring Finds a New Home A ring set with “hogback” diamonds, an early stone cut dating to around the 16th century, sold for more than $20,000 at a U.K. auction.
CollectionsJun 26, 2026
Strength Is Sharpened Into Beauty in Kris Averi’s ‘Prism Thorn’ RingThe rainbow version of the ring, our Piece of the Week, features angel-cut, octahedral lab-grown sapphires designed to be worn as armor.
MajorsJun 26, 2026
Rembrandt Charms Debuts ‘Charms That Give Back’The new initiative donates a portion of the proceeds from select charms to charitable causes.
TrendsJun 26, 2026
Bernard James Celebrates Knicks’ Win with RingThe Brooklyn-based jeweler created a limited-edition version of its “Aura” eternity band, set with gemstones in the team’s colors.
SourcingJun 25, 2026
ICA Names Brandee Dallow as CEODallow will lead the International Colored Gemstone Association, effective July 6.
EditorsJun 25, 2026
Out & About: How Jewelers Mutual, SCAD Are Tackling the Bench Jeweler ShortageSenior Editor Lenore Fedow headed to Savannah to learn more about the 10-year, $10 million partnership between JM and the art school.
CollectionsJun 25, 2026
Mejuri Experiments With SteelIts new capsule jewelry collection features gold-finished stainless steel pieces designed for a maximalist look without a luxury price tag.
