MajorsAug 05, 2026
Private Equity Firm Wants to Buy 100+ JCPenney StoresOnyx Partners has submitted a second offer to buy the department stores after its first offer fell through last year.
Events & AwardsApr 25, 2018
Live from Conclave: Understanding Cybersecurity Risks
Do your employees understand when an email should raise alarm bells? And are you patching your software when prompted?
Nashville, Tenn.—The hacks that make headlines are the ones that involve big companies and thousands, if not millions or billions, of files of customer data—Equifax, Yahoo and, most recently, Saks Fifth Avenue and Lord & Taylor.
But that doesn’t mean a small business, like a family-owned jewelry store, can’t be hacked.
“Every organization is a target,” Mary Myers, an information security analyst with Jewelers Mutual Insurance Group, said. “There are just different rationales for why.”
Myers presented a breakout session Monday morning at Conclave outlining the cybersecurity risks businesses face and detailing what jewelers should do if they are hacked.
She started with social engineering and phishing.
Social engineering is the act of manipulating employees into doing something they otherwise would not do. Phishing is social engineering via email and can involve attachments, directing the recipient to fake websites, or fake emails.
Myers said phishing emails are often unexpected and written in a way that makes them seem urgent (your immediate reply is requested, etc.).
While they can contain misspellings and grammatical errors, she noted that hackers are getting smarter and cleaning up their emails so there are fewer of these. Phishing messages also can come from email addresses that are nearly identical to (or exactly the same as, which is called spoofing) those of people with whom the business owner and/or employees communicate regularly.
The emails try to bait the the receiver into replying and engaging in a conversation, opening an attachment or clicking a link for the purposes of installing malware on the business’ computer systems.
The malware widely in use by hackers right now is called ransomware, Myers said. Hackers lock victims’ computers with encryption and demand they pay a ransom, via Bitcoin, to get their data back.
But that doesn’t mean a small business, like a family-owned jewelry store, can’t be hacked.
“Every organization is a target,” Mary Myers, an information security analyst with Jewelers Mutual Insurance Group, said. “There are just different rationales for why.”
Myers presented a breakout session Monday morning at Conclave outlining the cybersecurity risks businesses face and detailing what jewelers should do if they are hacked.
She started with social engineering and phishing.
Social engineering is the act of manipulating employees into doing something they otherwise would not do. Phishing is social engineering via email and can involve attachments, directing the recipient to fake websites, or fake emails.
Myers said phishing emails are often unexpected and written in a way that makes them seem urgent (your immediate reply is requested, etc.).
While they can contain misspellings and grammatical errors, she noted that hackers are getting smarter and cleaning up their emails so there are fewer of these. Phishing messages also can come from email addresses that are nearly identical to (or exactly the same as, which is called spoofing) those of people with whom the business owner and/or employees communicate regularly.
The emails try to bait the the receiver into replying and engaging in a conversation, opening an attachment or clicking a link for the purposes of installing malware on the business’ computer systems.
The malware widely in use by hackers right now is called ransomware, Myers said. Hackers lock victims’ computers with encryption and demand they pay a ransom, via Bitcoin, to get their data back.
Her initial recommendation is, of course, not to click on links or open the attachments in emails that seem suspicious. Delete the email, call the sender and ask if they sent that specific email with an attachment or consult IT support.
But that doesn’t always happen.
When a business owner or employee falls for a phish, Myers said options are somewhat limited.
She said what business owners should not do is pay, as there is no guarantee they will get their data back.
They should stop their system backup, wipe infected systems and devices, and restore using what was backed up before the malware was installed. (Systems need to be backed up regularly. Myers recommends having a set, repeating cycle; for example, it backs up every day at midnight.)
Jewelers also face cybersecurity risks from both employees and vendors/contractors who could accidentally load a virus onto a system by clicking a phishing link or visiting a disreputable site, or who could violate a business intentionally, by purposely loading or sending a virus or sharing sensitive customer information. Myers said business owners need to provide guidance to employees, vendors and contractors and to clearly define: what does acceptable internet use at the company look like?
While not heavily attended, the Conclave session did generate multiple questions from attendees.
One jeweler asked if should she turn off her servers at night to help protect against attacks. You can, Myers answered, but it won’t necessarily prevent anything, as some of this software is malware designed to enter the system and lie dormant until it can be activated.
Another asked if paid-for anti-virus software is better than free. Myers said anything that will help a business quarantine and clean up a virus is “great.” What will work best a particular business really depends on its size, needs and risk factors.
Myers wrapped up with a list of a half-dozen additional tips for increasing cybersecurity.
1. Keep an inventory of key systems and applications.
2. Keep an inventory of risks and threats, and use multiple layers of security.
3. Keep systems and devices patched.
All software has “gaps” that make it vulnerable to hackers, Myers said. “Patches” are released regularly by software companies and are intended to seal those gaps. Microsoft releases patches for its software on a monthly basis, but probably the most well-known example of a patch are the “updates” Apple regularly sends for iPhones and iPads.
“If you don’t close it,” Myers said of the gap, “you’re exposed. Patching is super, super critical.”
4. Back up systems and, Myers added, test the back-up.
Having a virus-infected system is going to create an “emotionally charged” situation. She said business owners don’t want that to be the first time they’ve ever walked through the process of employing their back-up.
5. Establish separation in key systems.
Business owners who host their own websites should separate it internally and not have it on the same server as the rest of their data. They also need to rotate job duties. They can’t “give the keys to the kingdom” to one person; hackers would have to have access to several people if there's separation.
Also, when someone leaves the company, take away their access to the company’s systems.
6. Train employees on cyber risks at least annually, if not quarterly.
In response to one jeweler’s question, Myers said business owners can require employees who connect personal devices to the store’s Wi-Fi to update those devices when prompted. She recommended writing it into the store’s policy.
The JSA also recently released a list of cybersecurity recommends, which was included in National Jeweler’s article about Saks getting hacked.
Jewelers also face cybersecurity risks from both employees and vendors/contractors who could accidentally load a virus onto a system by clicking a phishing link or visiting a disreputable site, or who could violate a business intentionally, by purposely loading or sending a virus or sharing sensitive customer information. Myers said business owners need to provide guidance to employees, vendors and contractors and to clearly define: what does acceptable internet use at the company look like?
While not heavily attended, the Conclave session did generate multiple questions from attendees.
One jeweler asked if should she turn off her servers at night to help protect against attacks. You can, Myers answered, but it won’t necessarily prevent anything, as some of this software is malware designed to enter the system and lie dormant until it can be activated.
Another asked if paid-for anti-virus software is better than free. Myers said anything that will help a business quarantine and clean up a virus is “great.” What will work best a particular business really depends on its size, needs and risk factors.
Myers wrapped up with a list of a half-dozen additional tips for increasing cybersecurity.
1. Keep an inventory of key systems and applications.
2. Keep an inventory of risks and threats, and use multiple layers of security.
3. Keep systems and devices patched.
All software has “gaps” that make it vulnerable to hackers, Myers said. “Patches” are released regularly by software companies and are intended to seal those gaps. Microsoft releases patches for its software on a monthly basis, but probably the most well-known example of a patch are the “updates” Apple regularly sends for iPhones and iPads.
“If you don’t close it,” Myers said of the gap, “you’re exposed. Patching is super, super critical.”
4. Back up systems and, Myers added, test the back-up.
Having a virus-infected system is going to create an “emotionally charged” situation. She said business owners don’t want that to be the first time they’ve ever walked through the process of employing their back-up.
5. Establish separation in key systems.
Business owners who host their own websites should separate it internally and not have it on the same server as the rest of their data. They also need to rotate job duties. They can’t “give the keys to the kingdom” to one person; hackers would have to have access to several people if there's separation.
Also, when someone leaves the company, take away their access to the company’s systems.
6. Train employees on cyber risks at least annually, if not quarterly.
In response to one jeweler’s question, Myers said business owners can require employees who connect personal devices to the store’s Wi-Fi to update those devices when prompted. She recommended writing it into the store’s policy.
The JSA also recently released a list of cybersecurity recommends, which was included in National Jeweler’s article about Saks getting hacked.
More on Events & Awards
The Latest
IndependentsAug 05, 2026
Atlanta Jeweler Introduces $10K MartiniSolomon Brothers Jewelers has partnered with local cocktail bar Roaring Social on a new martini garnished with a tennis necklace.
IndependentsAug 05, 2026
Another Member of the Siegel Family Joins Hamilton Jewelers Benjamin Siegel, son of President and CEO Hank Siegel, started working for the family business this week.
Brought to you by
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying EventsRetailers are seeking new ways to attract customers, increase traffic, and create revenue – Estate buying events are a popular solution.
MajorsAug 05, 2026
Bulgari Opens Store in San DiegoThe new space features a modern design that blends Bulgari’s Roman heritage with San Diego’s coastal spirit.
Weekly QuizJul 30, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
CrimeAug 04, 2026
Crew of Thieves Break Into Indiana Jeweler’s HomeFour men were charged in connection with the break-in and accused of stealing $365,000 in cash, jewelry, and designer goods.
MajorsAug 04, 2026
Pandora Hires Former Signet Board Member to Lead North American MarketAndré Branch has more than 25 years of experience with various brands, most recently serving as CEO of Ariana Grande’s cosmetics company.
Brought to you by
Wedding Band Trends 2026: Personalization Takes Center StageColored gemstones, artisan finishes, mixed metals, and meaningful details are shaping demand in bridal jewelry.
MajorsAug 04, 2026
Sasha Primak Acquires GemlokNew York-based atelier Gemlok is best known for creating the innovative “bridge” setting that became popular in the bridal market.
CollectionsAug 04, 2026
Musician Carlos Santana Launches Jewelry BrandSantana Now's debut collection, “Unidad,” features symbolic motifs as well as pieces of wood from the Woodstock stage.
CrimeAug 03, 2026
Florida Man Gets 15 Years in Trio of Jewelry Store RobberiesThe 50-year-old man pleaded guilty earlier this year to robbing two jewelry stores and a pawn shop of more than $700,000 in merchandise.
WatchesAug 03, 2026
Citizen's New Spider-Man Watch Is a Collector’s DreamThe watch’s dial features an original design by Marvel comics illustrator Adam Kubert.
CollectionsAug 03, 2026
Chatham Releases First Men’s CollectionThe new collection of lab-grown diamond and colored gemstone jewelry provides a “fresh perspective” on the category, Chatham said.
TrendsAug 03, 2026
Amanda’s Style File: Spinel vs. Peridot While some August babies are team peridot, the month's time-honored birthstone, others are team spinel, the newer alternative.
TrendsJul 31, 2026
These Pieces of the Week Are Sweet Edina Kiss’ “Popsicle” pendant and Karina Choudhrie’s “Ice Cream” charm satisfy that summer craving for a sweet piece of jewelry.
MajorsJul 31, 2026
Macy’s Iconic Red Shopping Bag Sign Torn DownThe massive billboard has been in the same spot on the department store’s Herald Square flagship store for decades.
SourcingJul 31, 2026
Gemfields’ H1 Revenue Jumps 72%The miner’s ruby and emerald auctions brought in a combined $102.9 million.
SourcingJul 30, 2026
De Beers Sale in ‘Final, Most Challenging’ Phase, Anglo CEO SaysThe goal is for the De Beers sale to be finished by the second half of 2026, with the subsequent approvals process expected to take a year.
Policies & IssuesJul 30, 2026
JA Heads Back to Washington as New Wave of Tariffs Takes Effect David Bonaparte, along with Tim Haake and Ronnie VanderLinden, continue to lobby for tariff exemptions for diamonds, gemstones, and pearls.
SurveysJul 30, 2026
Consumer Confidence Slips in JulySurvey respondents were concerned about the rising prices of food and groceries as well as unemployment.
EditorsJul 29, 2026
Q&A: The Past and Future of Angola’s Diamond Industry Endiama Commercial Director Elton Escrivão knows people have a lot of misperceptions about Angola. He wants to change that.
MajorsJul 29, 2026
Kevin Reilly Retires After 39 Years in the Jewelry Industry Reilly has been with PGI USA for the last 20 years, leading partnership development and professional education.
FinancialsJul 29, 2026
Kering’s H1 Jewelry Sales Up 14%Boucheron reached record sales while Pomellato found success in its signature collections.
Events & AwardsJul 29, 2026
Lauren Harwell Godfrey Designs a Flag for ArkansasShe was one of more than 120 American designers who created flags for the “United Flags of Fashion” project led by CFDA and Vogue.
ColumnistsJul 28, 2026
Peter Smith: Why Your Job Postings May Be Working Against You Smith reveals the method The Retail Smiths use to help retailers and vendors write better job postings.
FinancialsJul 28, 2026
Tiffany & Co., Bulgari Lead the Way for LVMH in H1LVMH’s jewelry and watch brands outperformed the company’s other divisions in an environment the company described as “disrupted.”
CollectionsJul 28, 2026
Lionheart’s New Collection Unites Spiritual Iconography“Sacred Heart” features symbols like crosses, angel wings, the Star of David, and the evil eye as a representation of coexistence.
