CollectionsJun 30, 2025
State Property’s New Jewelry Tells ‘The Story of Everything’Co-founders Afzal Imram and Lin Ruiyin brought their son’s story of a cosmic egg, toadstool, and railroad to life in their new collection.
SurveysAug 02, 2018
Report: US Retailers Are Top Targets for Data Breaches
According to the 2018 Thales Data Threat Report, U.S. retailers experienced twice as many IT security breaches than other retailers worldwide last year.
New York—A new report says that retailers in the United States are experiencing the most IT security breaches worldwide.
The retail edition of the 2018 Thales Data Threat Report based its findings on input from 100 senior retail IT security managers in the U.S. and 96 IT security managers from retailers in other countries to establish the state of IT security today.
It found that despite an increase in IT security spending—84 percent of U.S. retailers polled plan on upping their budgets this year, compared to 77 percent last year and 67 percent of international retailers this year—cyber-attackers are by and large staying one step ahead of companies.
Fifty percent of U.S. retailers surveyed said they experienced IT security breaches last year alone, compared to 19 percent in the 2017 report. Only 27 percent of global retailers, meanwhile, said they experienced a breach last year.
RELATED CONTENT: Saks, Lord & Taylor the Latest Hit by HackersSeventy-five percent of the respondents in the U.S. said they’ve experienced at least one breach, while 60 percent of global retailers said the same.
The retail industry, which is becoming increasingly digital, is a target for cyber attackers due to its high volume of credit card transactions. In fact, Thales says that overall, it’s the second most breached industry in the United States behind the federal government.
The results of the Thales study on IT security in retail mirror what the Jewelers Security Alliance found in its 2017 crime report. The JSA saw such a large uptick in cybercrime last year that for the first time ever, it broke the losses out separately.
The average dollar loss from cybercrime in the jewelry industry was $1.2 million last year, with JSA President John J. Kennedy calling it a “dangerous and growing crime trend.”
A Bad Investment
Despite the uptick in IT security budgets, the Thales report concluded that retailers are putting their money in places that even they recognize to be ineffective. what they themselves deem the most ineffective places.
Of available tools to battle security breaches, 91 percent of U.S. retailers said analysis and correlation tools are the most effective and 90 percent said data-in-motion— providing security for an e-mail in transit while it’s being sent, for example—is the second most effective weapon.
However, they indicated that their highest spending increases would go to endpoint/mobile defenses (77 percent), even though
they ranked this as the least effective security method. Only 57 percent of retailers plan to increase the budget for data-at rest (stored data) defense, and only 62 percent for data-in-motion defenses, despite these being more effective.
Where the Money Should Go
Thales asserts that tools like discovery/classification and encryption or tokenization are key to protecting against IT security breaches today.
Only 26 percent of U.S. retailers polled said they are implementing encryption in the cloud, compared with 30 percent of global retailers.
Fifty-two percent of U.S. respondents cited a lack of perceived need as the top reason for not devoting more resources to tools like encryption and tokenization, while 47 percent also cited impact on business performance and 46 percent were put off by its complexity.
In a past interview with National Jeweler, Kennedy offered a list of cybersecurity recommendations for jewelers specifically, some of which might involve hiring an IT firm.
They include: proper firewalls, up-to-date anti-virus software, the avoidance of “risky” internet sites and the training of staff on the types of mistakes that often let in hackers.
Staff need to be told, or reminded, not to open or click into unknown or suspicious emails, and to look carefully at emails from known parties for misspellings and other anomalies as emails addressed can be spoofed.
Thales said that retailers should “re-prioritize” their IT security toolsets, focusing on ones that offer service-based deployments, platforms and automation to reduce complexity while adding protection.
It also recommended that retailers go beyond national and international compliance measures and employ security tools like encryption and tokenization. Encryption needs to be applied to all platforms, not just desktop and laptop computers.
Specifically, Thales recommends encrypting the cloud, big data, data located within containers and IoT (interconnected devices with IP addresses).
It’s likely that compliance guidelines will one day mandate these practices, the report said, so retailers can benefit from getting a head start on them, hopefully avoiding data breaches in the process.
RELATED CONTENT: JSA: Smash-and-Grab Robberies, Cybercrime Up in 2017“Traditional endpoint and network security are no longer sufficient, particularly for heavy adopters of public cloud resources such as the U.S. retail sector,” the report said, especially with the expanding use of external cloud services like SaaS (software as a service), PaaS (platform as a service) and IaaS (infrastructure as a service).
Where the Money Should Go
Thales asserts that tools like discovery/classification and encryption or tokenization are key to protecting against IT security breaches today.
Only 26 percent of U.S. retailers polled said they are implementing encryption in the cloud, compared with 30 percent of global retailers.
Fifty-two percent of U.S. respondents cited a lack of perceived need as the top reason for not devoting more resources to tools like encryption and tokenization, while 47 percent also cited impact on business performance and 46 percent were put off by its complexity.
In a past interview with National Jeweler, Kennedy offered a list of cybersecurity recommendations for jewelers specifically, some of which might involve hiring an IT firm.
They include: proper firewalls, up-to-date anti-virus software, the avoidance of “risky” internet sites and the training of staff on the types of mistakes that often let in hackers.
Staff need to be told, or reminded, not to open or click into unknown or suspicious emails, and to look carefully at emails from known parties for misspellings and other anomalies as emails addressed can be spoofed.
Thales said that retailers should “re-prioritize” their IT security toolsets, focusing on ones that offer service-based deployments, platforms and automation to reduce complexity while adding protection.
It also recommended that retailers go beyond national and international compliance measures and employ security tools like encryption and tokenization. Encryption needs to be applied to all platforms, not just desktop and laptop computers.
Specifically, Thales recommends encrypting the cloud, big data, data located within containers and IoT (interconnected devices with IP addresses).
It’s likely that compliance guidelines will one day mandate these practices, the report said, so retailers can benefit from getting a head start on them, hopefully avoiding data breaches in the process.
More on Surveys
The Latest
ColumnistsJun 30, 2025
The Smart Lab: Why Q3 Is the Secret Weapon For Holiday Jewelry SalesThe best time to prepare for the holiday season is right now, according to columnist Emmanuel Raheb.
Events & AwardsJun 30, 2025
AGA Names Recipient of 2025 Gemological Education ScholarshipThis year’s winner is Morgan Keefe, who is currently studying at GIA to be a gemologist.
Brought to you by
Investing in the Next Generation of Bench JewelersThe Seymour & Evelyn Holtzman Bench Scholarship from Jewelers of America returns for a second year.
IndependentsJun 30, 2025
Melanie Grant’s New Book Explores 200 Years of Jewelry“The Jewelry Book” comes out this September.
Weekly QuizJun 26, 2025
This Week’s QuizTest your jewelry news knowledge by answering these questions.
TechnologyJun 27, 2025
Gemist Raises $6M in Funding to Scale Jewelry Tech PlatformThe company is focused on modernizing the custom jewelry buying experience with e-commerce tools like product visualization and 3D styling.
IndependentsJun 27, 2025
David Webb Announces New Hires, PromotionsFollowing its recent acquisition, the storied brand has updated its leadership team and regional managers.
Brought to you by
Jewelers of America is Headed to Las Vegas for JCK 2025The countdown is on for the JCK Las Vegas Show and JA is pulling out all the stops.
Events & AwardsJun 27, 2025
AGS, GIA Announce Beatrice Shipley Scholarship Winner AGS also named the recipient of its “Women in Leadership” scholarship.
CollectionsJun 27, 2025
Piece of the Week: Buddha Mama’s ‘Monstera’ Wrap RingThe 20-karat yellow gold and diamond wrap ring is modeled after the Monstera plants in the garden of the brand’s Miami villa.
MajorsJun 26, 2025
Why Rocksbox Is Opening Stores As Signet Jewelers DownsizesRocksbox President Allison Vigil shared the retailer’s expansion plans, and her thoughts on opening stores in malls.
IndependentsJun 26, 2025
Penny Ruston Dies at 80 The creator of the WJA Chicago chapter is remembered as a champion for women in the jewelry industry and a loving grandmother.
CollectionsJun 26, 2025
Jam Out With Sorellina’s Jimi Hendrix-Inspired JewelsThe “Playlist: Electric Dreams” collection brings lyrics from the musician’s song, “Little Wing,” to life through fine jewelry.
Events & AwardsJun 26, 2025
The Jewelry Symposium Is Looking for Speakers for 2026 EventThe event is set for May 16-19 in Detroit, Michigan.
IndependentsJun 25, 2025
Marissa Collections Opens in Nantucket as Legal Fight ContinuesThe Vault’s Katherine Jetter is accusing the retailer of using info she shared for a potential partnership to move into Nantucket.
CrimeJun 25, 2025
Customs Nabs Another Big Shipment of Fake Cartier, Van Cleef JewelryAgents seized 2,193 pieces, a mix of counterfeit Cartier “Love” and “Juste Un Clou” bracelets, and Van Cleef & Arpels’ “Alhambra” design.
CollectionsJun 25, 2025
Splash into Karina Choudhrie’s Collection of Underwater Circus PerformersThe designer brought her children’s book, “The Big Splash Circus,” to life through a collection of playful fine jewelry characters.
Events & AwardsJun 25, 2025
JA Announces Impact Initiative Fund RecipientsThe trade association has chosen the recipients of the funding initiative it formed to foster the growth and sustainability of the industry.
SourcingJun 25, 2025
2025 AGTA Spectrum Awards Open for EntriesThe organization has also announced this year’s slate of judges.
EditorsJun 24, 2025
The Best New Jewelry from Couture 2025, Part 2Associate Editor Natalie Francisco shares 20 additional pieces that stood out to her at the Couture show.
IndependentsJun 24, 2025
Colorado Bench Jeweler Celebrates 50 Years With Local RetailerLori Tucker started at Williams Jewelers when she was 18 years old.
WatchesJun 24, 2025
Citizen’s New ‘Fantastic Four’ Watch Is Literally Super The “Marvel | Citizen Zenshin” watch is crafted in Super Titanium and has subtle nods to all four “Fantastic Four” superheroes on the dial.
MajorsJun 24, 2025
Tacori, QVC to Launch Exclusive Lab-Grown Diamond Jewelry CollectionThe “XO Tacori” collection was designed to blend luxury and accessible pricing.
GradingJun 23, 2025
GIA Names New President and CEO Pritesh Patel, the lab’s chief operating officer, will take over as president and CEO of GIA.
Recorded WebinarsJun 23, 2025
Watch: Top Trends at Couture, JCK Las Vegas 2025National Jeweler and Jewelers of America discuss the standout jewelry trends and biggest news to emerge from the shows this year.
SourcingJun 23, 2025
Diamond Producers, Organizations to Kick in Money to Promote Natural DiamondsSignatories to the “Luanda Accord” committed to allocating 1 percent of annual diamond revenue to the Natural Diamond Council.
Events & AwardsJun 23, 2025
Jose Hess Design Awards Celebrate 6 Jewelry DesignersThe winning designs captured the “Radiance” theme.
