Majors

Saks, Lord & Taylor the Latest Hit by Hackers

MajorsApr 03, 2018

Saks, Lord & Taylor the Latest Hit by Hackers

They reportedly gained access to the retailers’ cash register systems to steal payment card data from more than 5 million customers.

2018_Lord_and_Taylor.jpg
Hudson’s Bay Company announced Sunday that hackers had gained access to the debit and credit card numbers of customers at two of its retailers--Lord &Taylor and Saks.

New York--Saks Fifth Avenue and sister retailer Lord & Taylor just joined the long list of large companies that have been hacked.

On Sunday, parent company Hudson’s Bay Co. issued a short statement confirming that it had become aware of a “data security issue” involving the credit and debit card numbers of customers who shopped at certain Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores in North America.

While the investigation is ongoing, HBC said it doesn’t appear the breach impacted customers who shopped at any of its other stores or online, including on Gilt.com.

“The company deeply regrets any inconvenience or concern this might cause,” the statement reads. “Once the company has more clarity around the facts, it will notify customers quickly and will offer those impacted free identity protection services, including credit and web monitoring.”

HBC did not release any specifics about the number of consumers or location of stores impacted, but in a blog post also published Sunday, Gemini Advisory pinned the attack on a cybercrime syndicate known as JokerStash or Fin7.

The cybersecurity research firm said Fin7 announced March 28 it would be releasing for sale more than 5 million stolen debit and credit card numbers on the dark web, and already has put about 125,000 out there.

Fin7 didn’t say where it obtained the numbers, but Gemini said it confirmed with a “high degree of confidence” that the numbers came from Saks Fifth Avenue and Lord & Taylor. It estimated the breach occurred between May 2017 and now, impacting all Lord & Taylor and 83 Saks stores mainly in New York and New Jersey.

The research firm said it is “among the most significant credit card heists in modern history.”

A spokesperson for HBC declined to comment on Gemini’s statement.

Cybercrime is a growing problem for retailers, including retail jewelers.

In its recently released annual crime report for 2017, the Jewelers Security Alliance noted a “large dollar increase” in thefts by deception and impersonation made possible by the internet, with the average loss from this type of incident topping $1 million.

JSA President John J. Kennedy called it a “dangerous and growing crime trend” for the industry.

On Monday, he offered a number of cybersecurity tips for retailers. Some, he noted, might involve hiring an IT consulting firm.

Kennedy said retailers need to have proper firewalls and up-to-date anti-malware software for all systems, and they need to avoid visiting “questionable and risky sites.”

Jewelers

also need to educate their staff on the common mistakes made that let hackers in.

Kennedy said one of the main methods cybercriminals employ is social engineering, in which they use various methods to win the trust of the company’s employees in order to gain unauthorized access to its IT system.

(The New York Times reported this is what was used by the hackers who targeted Saks and Lord & Taylor. The credit and debit card numbers were stolen via software implanted into the stores’ cash register systems that, most likely, was installed through phishing emails sent to HBC employees.)

He said staff need to be told, or reminded, not to open or click into unknown or suspicious emails.

They also need to be aware that emails can be spoofs—which use the exact email address of known individuals—or come from someone who has obtained an email address that is very similar to, but not exactly the same as, a known party’s address. They need to look for foreign domains, misspellings and other anomalies in emails.

When a transaction is involved, Kennedy recommends calling the person on the phone to confirm that it is not a fraud.

He also recommends having a written cybersecurity policy employees have to read and sign, and having regular staff meetings that include reviews of the company’s cybersecurity protocols.
Michelle Graffis the editor-in-chief at National Jeweler, directing the publication’s coverage both online and in print.

The Latest

Time CEO Jessica Sibley, Botswana President Duma Boko, and Botswana Minster of Minerals and Energy Bogolo Joy Kenewendo in New York
SourcingSep 30, 2026
Botswana’s President, De Beers CEO Say Diamond Demand Is Recovering

President Duma Boko spoke at back-to-back events in the city last week, touting Botswana’s stability and the diamond “bounceback.”

Oscar Heyman A Living Archive Holiday Book
CollectionsSep 30, 2026
Oscar Heyman’s Holiday Book Is ‘A Living Archive’

The catalog showcases 112 new, one-of-a-kind pieces amid highlights from the jeweler’s historic archive.

Gemfields rubies
SourcingSep 30, 2026
Gemfields Posts $98.5M Loss, Writes Down Value of Ruby Mine

Its Montepuez Ruby Mining operation in Mozambique, which is not yielding enough high-quality rubies, has taken a $125 million hit.

1872 x 1052 Gemolite.jpg
Brought to you by
Meet Gemology’s Next Generation Microscope: GIA® Gemolite® NXT Professional Edition

Experience gemstones with greater precision and comfort than ever before.

Hand holding a gas pump
SurveysSep 30, 2026
Consumer Confidence Falls to 12-Year Low in September

Those surveyed were worried about the present and the future, with write-in responses mentioning high oil and gas prices.

Weekly QuizSep 25, 2026
This Week’s Quiz
Test your jewelry news knowledge by answering these questions.
Take the Quiz
JA New York sign
Events & AwardsSep 30, 2026
Jewelers of America, JA New York to Host Networking Event

The event will take place on the evening of Oct. 26 in New York City.

Christy Bromberg
IndependentsSep 29, 2026
Christy Bromberg, Longtime Gift Buyer for Underwood Jewelers, Dies at 68

She is remembered for her joie de vivre, upbeat personality, genuine interest in other people, and love of the Alabama Crimson Tide.

Cover.jpg
Brought to you by
Your Piece Could Be the One Editors Talk About

Submit your pieces for a chance to win in this year's competition.

Dionne Warwick brown diamond ring from Sultan of Brunei
AuctionsSep 29, 2026
Dionne Warwick’s Jewelry Goes Up for Auction

Online bidding is open now for Julien’s sale of items owned by the “Walk On By” singer, whose final album comes out this fall.

Matt Stuller
Events & AwardsSep 29, 2026
Matt Stuller to Receive 2027 Gem Award for Lifetime Achievement

The founder and executive chairman of Stuller Inc. is being honored for his impact on the jewelry industry at the 25th annual Gem Awards.

Emmanuel Raheb, CEO of Smart Age Solutions
ColumnistsSep 29, 2026
Your Holiday Marketing Has a Bridal Blind Spot

December is the most popular month to propose, and jewelers need to keep that in mind when planning their holiday marketing.

Sandy Lerner’s 18-karat gold and diamond cat brooch
AuctionsSep 29, 2026
If You Love Cats, This Jewelry Auction Is for You

Cat ladies of the jewelry world, unite. Sandy Lerner’s collection of cat jewelry and other objects is going up for auction Wednesday.

De Beers London Vibrations high jewelry Echo transformable necklace
CollectionsSep 28, 2026
De Beers London Drops Water-Inspired High Jewelry Collection

“Vibrations” features several firsts for De Beers’ high jewelry, including the use of chalcedony and diamonds sourced from artisanal miners.

Zoë Kravitz Wearing Jessica McCormack’s Bows Collection
CollectionsSep 28, 2026
Jessica McCormack Turns to Classic Motif for New Collection

The “Bows” collection features three interpretations of the bow motif designed with Georgian and Victorian influences.

Amanda Coleman-Phelps and Guy Borenstein
Events & AwardsSep 28, 2026
Guy Borenstein, Troy Underwood Among the Professionals Honored at AGS Conclave 2026

The American Gem Society recognized industry members, one Guild, and a law enforcement official for their contributions to jewelry.

Jewelers Mutual Instappraise screenshot mock up
FinancialsSep 28, 2026
Instappraise, Jewelers Mutual Look to Simplify Jewelry Insurance

Through a new system integration, customers can now receive instant personal jewelry insurance quotes at the time of appraisal.

Rolex Datejust 31 ref. 6827 and Rolex Lady Datejust ref. 6917
WatchesSep 25, 2026
Smaller Rolex Watches Showing Strength on Secondary Market, Data Shows

Five of the 10 fastest-appreciating Rolex models on Bob’s Watches were Datejust 31 or Lady Datejust watches.

Brilliant Earth The Elizabeth Taylor Collection Campaign Imagery
Lab-GrownSep 25, 2026
Brilliant Earth Collabs with Elizabeth Taylor Estate on Jewelry Collection

“The Elizabeth Taylor Collection” uses lab-grown diamonds and gemstones in contemporary designs inspired by the icon.

Dana Rebecca Alexa Jordyn Marquise Marge hoops
TrendsSep 25, 2026
A Peek at Taylor Swift’s Game-Day Diamonds

The artist wore Dana Rebecca Designs’ marquise diamond-set gold hoops at the Chiefs game last Sunday. Now they’re our Piece of the Week.

Jewelry display
CrimeSep 24, 2026
From Conclave: Security Measures Jewelers Should Be Taking

JSA and Jewelers Mutual shared advice on spotting suspicious behavior, combatting cell phone jammers, and staying safe at home.

Header - One platform_ total protection_ seamless shipping (1).png
Supplier BulletinSep 24, 2026
Ship with Confidence with JM Shipping Solution

Sponsored by JM Shipping

8.03 carat natural fancy light blue diamond
AuctionsSep 24, 2026
8-Carat Blue Diamond Heads to UK Jewelry Auction

The fancy light blue diamond is estimated to fetch up to $2.6 million at Elmwood’s next week.

Secret Language of Victorian Jewelry by Amy Azzarito
TrendsSep 24, 2026
This New Jewelry Book Decodes the Secret Meaning in Victorian Jewelry

“Secret Language of Victorian Jewelry” unveils the meaning behind the symbols, motifs, and gemstones used in Victorian-era jewelry.

Lab-grown diamond tennis bracelets and rings from Kira Jewels
Lab-GrownSep 24, 2026
Kira Jewels Opens B2B E-Commerce Portal for Lab-Grown Diamond Jewelry

KIRAJewels.one gives retailers access to more than 500 SKUs of lab-grown diamond rings, earrings, necklaces, and bracelets.

Dana Rebecca Designs Tennis Bracelets Campaign Imagery
TrendsSep 23, 2026
Holiday Diamond Jewelry Trends: Layered Looks, Personalization

This holiday season, look to pieces that will help to fill out customers’ everyday diamond jewelry wardrobe, experts say.

The logo for The Diamond Collective, the new name for the Natural Diamond Council
SourcingSep 23, 2026
Organization That Promotes Natural Diamond Rebrands for Third Time

The Natural Diamond Council is now The Diamond Collective and has announced a new strategy under CEO Amber Pepper.

Paul’s Jewelers 7Cs Cafe
IndependentsSep 23, 2026
This Milwaukee-Area Jeweler Is Serving the 7Cs

Paul’s Jewelers sells coffee, chocolate, and cookies from a custom gold-wrapped trailer parked outside the store starting at 7 a.m.

×

This site uses cookies to give you the best online experience. By continuing to use & browse this site, we assume you agree to our Privacy Policy