CollectionsSep 16, 2026
Jessica McCormack, L’Objet Collab on Homewares CollectionMcCormack brings sea-inspired motifs from her “Beaches” collection to L’Objet’s tableware, vanity pieces, and first-ever cutlery set.
Events & AwardsApr 25, 2018
Live from Conclave: Understanding Cybersecurity Risks
Do your employees understand when an email should raise alarm bells? And are you patching your software when prompted?
Nashville, Tenn.—The hacks that make headlines are the ones that involve big companies and thousands, if not millions or billions, of files of customer data—Equifax, Yahoo and, most recently, Saks Fifth Avenue and Lord & Taylor.
But that doesn’t mean a small business, like a family-owned jewelry store, can’t be hacked.
“Every organization is a target,” Mary Myers, an information security analyst with Jewelers Mutual Insurance Group, said. “There are just different rationales for why.”
Myers presented a breakout session Monday morning at Conclave outlining the cybersecurity risks businesses face and detailing what jewelers should do if they are hacked.
She started with social engineering and phishing.
Social engineering is the act of manipulating employees into doing something they otherwise would not do. Phishing is social engineering via email and can involve attachments, directing the recipient to fake websites, or fake emails.
Myers said phishing emails are often unexpected and written in a way that makes them seem urgent (your immediate reply is requested, etc.).
While they can contain misspellings and grammatical errors, she noted that hackers are getting smarter and cleaning up their emails so there are fewer of these. Phishing messages also can come from email addresses that are nearly identical to (or exactly the same as, which is called spoofing) those of people with whom the business owner and/or employees communicate regularly.
The emails try to bait the the receiver into replying and engaging in a conversation, opening an attachment or clicking a link for the purposes of installing malware on the business’ computer systems.
The malware widely in use by hackers right now is called ransomware, Myers said. Hackers lock victims’ computers with encryption and demand they pay a ransom, via Bitcoin, to get their data back.
But that doesn’t mean a small business, like a family-owned jewelry store, can’t be hacked.
“Every organization is a target,” Mary Myers, an information security analyst with Jewelers Mutual Insurance Group, said. “There are just different rationales for why.”
Myers presented a breakout session Monday morning at Conclave outlining the cybersecurity risks businesses face and detailing what jewelers should do if they are hacked.
She started with social engineering and phishing.
Social engineering is the act of manipulating employees into doing something they otherwise would not do. Phishing is social engineering via email and can involve attachments, directing the recipient to fake websites, or fake emails.
Myers said phishing emails are often unexpected and written in a way that makes them seem urgent (your immediate reply is requested, etc.).
While they can contain misspellings and grammatical errors, she noted that hackers are getting smarter and cleaning up their emails so there are fewer of these. Phishing messages also can come from email addresses that are nearly identical to (or exactly the same as, which is called spoofing) those of people with whom the business owner and/or employees communicate regularly.
The emails try to bait the the receiver into replying and engaging in a conversation, opening an attachment or clicking a link for the purposes of installing malware on the business’ computer systems.
The malware widely in use by hackers right now is called ransomware, Myers said. Hackers lock victims’ computers with encryption and demand they pay a ransom, via Bitcoin, to get their data back.
Her initial recommendation is, of course, not to click on links or open the attachments in emails that seem suspicious. Delete the email, call the sender and ask if they sent that specific email with an attachment or consult IT support.
But that doesn’t always happen.
When a business owner or employee falls for a phish, Myers said options are somewhat limited.
She said what business owners should not do is pay, as there is no guarantee they will get their data back.
Editors' Picks
Sponsored by
They should stop their system backup, wipe infected systems and devices, and restore using what was backed up before the malware was installed. (Systems need to be backed up regularly. Myers recommends having a set, repeating cycle; for example, it backs up every day at midnight.)
Jewelers also face cybersecurity risks from both employees and vendors/contractors who could accidentally load a virus onto a system by clicking a phishing link or visiting a disreputable site, or who could violate a business intentionally, by purposely loading or sending a virus or sharing sensitive customer information. Myers said business owners need to provide guidance to employees, vendors and contractors and to clearly define: what does acceptable internet use at the company look like?
While not heavily attended, the Conclave session did generate multiple questions from attendees.
One jeweler asked if should she turn off her servers at night to help protect against attacks. You can, Myers answered, but it won’t necessarily prevent anything, as some of this software is malware designed to enter the system and lie dormant until it can be activated.
Another asked if paid-for anti-virus software is better than free. Myers said anything that will help a business quarantine and clean up a virus is “great.” What will work best a particular business really depends on its size, needs and risk factors.
Myers wrapped up with a list of a half-dozen additional tips for increasing cybersecurity.
1. Keep an inventory of key systems and applications.
2. Keep an inventory of risks and threats, and use multiple layers of security.
3. Keep systems and devices patched.
All software has “gaps” that make it vulnerable to hackers, Myers said. “Patches” are released regularly by software companies and are intended to seal those gaps. Microsoft releases patches for its software on a monthly basis, but probably the most well-known example of a patch are the “updates” Apple regularly sends for iPhones and iPads.
“If you don’t close it,” Myers said of the gap, “you’re exposed. Patching is super, super critical.”
4. Back up systems and, Myers added, test the back-up.
Having a virus-infected system is going to create an “emotionally charged” situation. She said business owners don’t want that to be the first time they’ve ever walked through the process of employing their back-up.
5. Establish separation in key systems.
Business owners who host their own websites should separate it internally and not have it on the same server as the rest of their data. They also need to rotate job duties. They can’t “give the keys to the kingdom” to one person; hackers would have to have access to several people if there's separation.
Also, when someone leaves the company, take away their access to the company’s systems.
6. Train employees on cyber risks at least annually, if not quarterly.
In response to one jeweler’s question, Myers said business owners can require employees who connect personal devices to the store’s Wi-Fi to update those devices when prompted. She recommended writing it into the store’s policy.
The JSA also recently released a list of cybersecurity recommends, which was included in National Jeweler’s article about Saks getting hacked.
Jewelers also face cybersecurity risks from both employees and vendors/contractors who could accidentally load a virus onto a system by clicking a phishing link or visiting a disreputable site, or who could violate a business intentionally, by purposely loading or sending a virus or sharing sensitive customer information. Myers said business owners need to provide guidance to employees, vendors and contractors and to clearly define: what does acceptable internet use at the company look like?
While not heavily attended, the Conclave session did generate multiple questions from attendees.
One jeweler asked if should she turn off her servers at night to help protect against attacks. You can, Myers answered, but it won’t necessarily prevent anything, as some of this software is malware designed to enter the system and lie dormant until it can be activated.
Another asked if paid-for anti-virus software is better than free. Myers said anything that will help a business quarantine and clean up a virus is “great.” What will work best a particular business really depends on its size, needs and risk factors.
Myers wrapped up with a list of a half-dozen additional tips for increasing cybersecurity.
1. Keep an inventory of key systems and applications.
2. Keep an inventory of risks and threats, and use multiple layers of security.
3. Keep systems and devices patched.
All software has “gaps” that make it vulnerable to hackers, Myers said. “Patches” are released regularly by software companies and are intended to seal those gaps. Microsoft releases patches for its software on a monthly basis, but probably the most well-known example of a patch are the “updates” Apple regularly sends for iPhones and iPads.
“If you don’t close it,” Myers said of the gap, “you’re exposed. Patching is super, super critical.”
4. Back up systems and, Myers added, test the back-up.
Having a virus-infected system is going to create an “emotionally charged” situation. She said business owners don’t want that to be the first time they’ve ever walked through the process of employing their back-up.
5. Establish separation in key systems.
Business owners who host their own websites should separate it internally and not have it on the same server as the rest of their data. They also need to rotate job duties. They can’t “give the keys to the kingdom” to one person; hackers would have to have access to several people if there's separation.
Also, when someone leaves the company, take away their access to the company’s systems.
6. Train employees on cyber risks at least annually, if not quarterly.
In response to one jeweler’s question, Myers said business owners can require employees who connect personal devices to the store’s Wi-Fi to update those devices when prompted. She recommended writing it into the store’s policy.
The JSA also recently released a list of cybersecurity recommends, which was included in National Jeweler’s article about Saks getting hacked.
More on Events & Awards
The Latest
CrimeSep 16, 2026
JSA Issues Warning to NJ Jewelers After Rash of Smash and GrabsNine New Jersey jewelers have been victims of smash-and-grab robberies this year, prompting JSA to circulate a list of recommendations.
IndependentsSep 16, 2026
Bromberg & Co. Names New PresidentMarlin “Brian” Hood, who has been with the store for 20 years, will succeed Ricky Bromberg, who died earlier this month.
Brought to you by
Your Piece Could Be the One Editors Talk AboutSubmit your pieces for a chance to win in this year's competition.
MajorsSep 16, 2026
Midas Chain Releases ‘House of Midas’ Bridal CatalogThe new bridal catalog features the latest jewelry collections and designs from timeless classics to modern silhouettes.
Weekly QuizSep 10, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
EditorsSep 15, 2026
2026 Emmys Jewelry: An Either/Or Proposition Stars wore either a necklace or earrings at 78th Primetime Emmy Awards but rarely both, Natalie Francisco notes.
ColumnistsSep 15, 2026
The Levels Your Website Must Clear Before AI Recommends YouJennifer Shaheen compares this new era of AI-powered SEO to a video game: your website must clear one level before advancing to the next.
Brought to you by
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying EventsRetailers are seeking new ways to attract customers, increase traffic, and create revenue – Estate buying events are a popular solution.
IndependentsSep 15, 2026
Armadani Launches Retail Support Program for Holiday SeasonThe program highlights “Made in Italy” fine jewelry with digital merchandising, sales education, and local marketing support.
EditorsSep 15, 2026
Q&A: Signet Jewelers’ Joan Hilson on Diamond Demand, the HolidaysHilson, Signet’s chief operating and financial officer, discussed Q2, resurgent natural diamond demand, and why Blue Nile is a standout.
ColumnistsSep 14, 2026
Sherry Smith: Stop Waiting for December to Save Your ChristmasThe stores that have a great December are the ones that made good decisions in August, September, and October, Sherry Smith writes.
AuctionsSep 14, 2026
22 Carats of ‘Sunshine’ Are Up for AuctionThe 22.09-carat fancy yellow “Pragnell Kimberley Sunshine Diamond” is part of the fall jewelry sale at Heritage Auctions.
IndependentsSep 14, 2026
Greenwich St. Jewelers to Unveil Photography Exhibition“Adornos: Jewelry, Memory & What We Pass Down” honors the jewelry’s importance to New York City’s Latine communities.
SourcingSep 14, 2026
Gemfields Sells All Lots at First Emerald Auction in 9 MonthsThe company’s managing director of sales said the results demonstrate “continued strong demand for commercial-quality emeralds.”
SourcingSep 14, 2026
Diamonds Do Good Pledges Support for Eye Care ProgramThe nonprofit awarded a grant to the Gift of Sight initiative spearheaded by South African musician Black Coffee.
CollectionsSep 11, 2026
A Sapphire ‘Stardust’ Ring From Greenwich St. Jewelers The Latine-owned New York jeweler is marking two milestones this year: its 50th anniversary and the 25th anniversary of the 9/11 attacks.
MajorsSep 11, 2026
The Wishing Place by JTV OpensThe jewelry retail broadcast network has sponsored a new space for Make-A-Wish East Tennessee on its campus in Knoxville.
MajorsSep 10, 2026
Lagos Founder Steven Lagos Steps Down as CEO Keith Rolfe, CFO and COO of Lagos, is now at the jewelry brand’s helm while Steven takes on the role of executive chairman.
CrimeSep 10, 2026
FBI Offers $50K Reward for ‘Most Wanted’ Fugitive in $1M Jewelry HeistAlberto Perez-Elias is one of four men charged in the armed robbery of a Cape Coral, Florida, jewelry store and remains at large.
AuctionsSep 10, 2026
Massive Matched Pair of Paraíba Tourmalines Head to Sotheby’sThe “Kat Florence Luminas” will be offered together as one lot and could fetch up to $637,000.
SourcingSep 10, 2026
AGTA Announces 4 Newly Elected DirectorsFour directors were elected to the AGTA board and will serve three-year terms beginning in February.
AuctionsSep 10, 2026
Former Sotheby’s, Christie’s Exec Appointed CEO of Julien’s Auctions Ken Citron joins the celebrity memorabilia-focused auction house ahead of its first week-long series of events in Abu Dhabi.
FinancialsSep 09, 2026
Signet Jewelers to ‘Double Down’ on Blue Nile Amid Strong SalesThe jewelry retailer said it sees opportunity at higher price points, particularly in natural diamonds for bridal and fashion.
IndependentsSep 09, 2026
Sarah Leonard Fine Jewelers Closes After Nearly 80 YearsThe Los Angeles-based, family-owned jeweler was founded by Lenny and Sunny Friedman in 1946.
SourcingSep 09, 2026
Fura Gems Notes ‘Remarkable’ Interest in Larger Rubies at Latest SaleThe auction, held in Bangkok, was 96 percent sold by lot, with nearly 411,000 carats of Mozambiquan rubies sold.
MajorsSep 09, 2026
Stuller’s Latest Catalog Includes Its New Demi-Fine CollectionFine Jewelry 2027-2028 has more than 900 new styles, including silver, gold-filled, gold-plated sterling silver, and vermeil jewelry.
Policies & IssuesSep 09, 2026
8 Key Changes the FTC Made to the Jewelry Guides: A Refresher Learn more about the new terms for lab-grown diamonds and composite gemstones, and the major changes in store for precious metals jewelry.
