Majors

Saks, Lord & Taylor the Latest Hit by Hackers

MajorsApr 03, 2018

Saks, Lord & Taylor the Latest Hit by Hackers

They reportedly gained access to the retailers’ cash register systems to steal payment card data from more than 5 million customers.

2018_Lord_and_Taylor.jpg
Hudson’s Bay Company announced Sunday that hackers had gained access to the debit and credit card numbers of customers at two of its retailers--Lord &Taylor and Saks.

New York--Saks Fifth Avenue and sister retailer Lord & Taylor just joined the long list of large companies that have been hacked.

On Sunday, parent company Hudson’s Bay Co. issued a short statement confirming that it had become aware of a “data security issue” involving the credit and debit card numbers of customers who shopped at certain Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores in North America.

While the investigation is ongoing, HBC said it doesn’t appear the breach impacted customers who shopped at any of its other stores or online, including on Gilt.com.

“The company deeply regrets any inconvenience or concern this might cause,” the statement reads. “Once the company has more clarity around the facts, it will notify customers quickly and will offer those impacted free identity protection services, including credit and web monitoring.”

HBC did not release any specifics about the number of consumers or location of stores impacted, but in a blog post also published Sunday, Gemini Advisory pinned the attack on a cybercrime syndicate known as JokerStash or Fin7.

The cybersecurity research firm said Fin7 announced March 28 it would be releasing for sale more than 5 million stolen debit and credit card numbers on the dark web, and already has put about 125,000 out there.

Fin7 didn’t say where it obtained the numbers, but Gemini said it confirmed with a “high degree of confidence” that the numbers came from Saks Fifth Avenue and Lord & Taylor. It estimated the breach occurred between May 2017 and now, impacting all Lord & Taylor and 83 Saks stores mainly in New York and New Jersey.

The research firm said it is “among the most significant credit card heists in modern history.”

A spokesperson for HBC declined to comment on Gemini’s statement.

Cybercrime is a growing problem for retailers, including retail jewelers.

In its recently released annual crime report for 2017, the Jewelers Security Alliance noted a “large dollar increase” in thefts by deception and impersonation made possible by the internet, with the average loss from this type of incident topping $1 million.

JSA President John J. Kennedy called it a “dangerous and growing crime trend” for the industry.

On Monday, he offered a number of cybersecurity tips for retailers. Some, he noted, might involve hiring an IT consulting firm.

Kennedy said retailers need to have proper firewalls and up-to-date anti-malware software for all systems, and they need to avoid visiting “questionable and risky sites.”

Jewelers

also need to educate their staff on the common mistakes made that let hackers in.

Kennedy said one of the main methods cybercriminals employ is social engineering, in which they use various methods to win the trust of the company’s employees in order to gain unauthorized access to its IT system.

(The New York Times reported this is what was used by the hackers who targeted Saks and Lord & Taylor. The credit and debit card numbers were stolen via software implanted into the stores’ cash register systems that, most likely, was installed through phishing emails sent to HBC employees.)

He said staff need to be told, or reminded, not to open or click into unknown or suspicious emails.

They also need to be aware that emails can be spoofs—which use the exact email address of known individuals—or come from someone who has obtained an email address that is very similar to, but not exactly the same as, a known party’s address. They need to look for foreign domains, misspellings and other anomalies in emails.

When a transaction is involved, Kennedy recommends calling the person on the phone to confirm that it is not a fraud.

He also recommends having a written cybersecurity policy employees have to read and sign, and having regular staff meetings that include reviews of the company’s cybersecurity protocols.
Michelle Graffis the editor-in-chief at National Jeweler, directing the publication’s coverage both online and in print.

The Latest

Ann Weaver Bailey, also known as “Mama Ann”
IndependentsFeb 19, 2026
Bailey’s Fine Jewelry Co-Founder ‘Mama Ann’ Bailey Dies at 100

Raised in an orphanage, Bailey was 18 when she met her husband, Clyde. They opened their North Carolina jewelry store in 1948.

Headshot of National Jeweler columnist Peter Smith
ColumnistsFeb 19, 2026
Peter Smith: Happiness, Cavemen, and Jewelry Sales

Smith encourages salespeople to ask customers questions that elicit the release of oxytocin, the brain’s “feel-good” chemical.

Material Good Boston Location Interior Rendering
IndependentsFeb 19, 2026
Material Good Opens Third Location

Material Good is celebrating its 10th anniversary as it opens its new store in the Back Bay neighborhood of Boston.

MJSA Apprenticeship Guide
Brought to you by
The MJSA Mentor & Apprenticeship Program: Attracting & Training the Next Generation of Bench Jewelers

Launched in 2023, the program will help the passing of knowledge between generations and alleviate the shortage of bench jewelers.

Original Miami Beach Antique Show sign
Events & AwardsFeb 19, 2026
The Original Miami Beach Antique Show Returns in March

The show will be held March 26-30 at the Miami Beach Convention Center.

Weekly QuizFeb 12, 2026
This Week’s Quiz
Test your jewelry news knowledge by answering these questions.
Take the Quiz
Joanna Carson jewelry auction
AuctionsFeb 18, 2026
Joanna Carson’s Jewels Head to Auction

The estate of the model, philanthropist, and ex-wife of Johnny Carson has signed statement jewels up for sale at John Moran Auctioneers.

My Next Question podcast with Marion Fasel and Natalie Francisco
PodcastsFeb 18, 2026
Episode 2: Jewelry Trends & Does the Red Carpet Matter?

Are arm bands poised to make a comeback? Has red-carpet jewelry become boring? Find out on the second episode of the “My Next Question” podcast.

JamAlert 1872x1052.png
Brought to you by
How Jewelers Can Fight Back Against Cell Jammers

Criminals are using cell jammers to disable alarms, but new technology like JamAlert™ can stop them.

Community for Ethical Jewelry Logo
Policies & IssuesFeb 18, 2026
Community for Ethical Jewelry Looks for Executive Director

The organization is seeking a new executive director to lead it into its next phase of strategic growth and industry influence.

DCA colored gemstone course on laptop
Events & AwardsFeb 18, 2026
DCA to Host Gemstone Selling Education Session at IJO Event

The nonprofit will present a live, two-hour introductory course on building confidence when selling colored gemstones.

Cece Jewellery Traveller’s Tale Ring
TrendsFeb 17, 2026
A Bit of Jewelry for the Year of the Horse

Western wear continues to trend in the Year of the Fire Horse and along with it, horse and horseshoe motifs in jewelry.

Anza gems
SourcingFeb 17, 2026
Colored Gemstone Experts Talk Tariffs, Trends in Tucson

Although the market is robust, tariffs and precious metal prices are impacting the industry, Stuart Robertson and Brecken Branstrator said.

Dr. George Rossman
GradingFeb 17, 2026
Dr. George Rossman, Former GIA Governor, Dies at 81

Rossman, who advised GIA for more than 50 years, is remembered for his passion and dedication to the field of gemology.

Nest doorbell camera footage of suspect in Nancy Guthrie abduction
CrimeFeb 13, 2026
JSA Offering $10K Reward in Nancy Guthrie Case

Guthrie, the mother of “Today” show host Savannah Guthrie, was abducted just as the Tucson gem shows were starting.

Butterfield Jewelers going out of business sale ad
IndependentsFeb 13, 2026
97-Year-Old New Mexico Jewelry Store To Close

Butterfield Jewelers in Albuquerque, New Mexico, is preparing to close as members of the Butterfield family head into retirement.

Paul Morelli Rosebud Necklace
CollectionsFeb 13, 2026
A ‘Rosebud’ Necklace for Valentine’s Day

Paul Morelli’s “Rosebud” necklace, our Piece of the Week, uses 18-karat rose, green, and white gold to turn the symbol of love into jewelry.

Saks Fifth Avenue Club personal styling suite in Austin Texas
MajorsFeb 12, 2026
These 8 Saks Fifth Avenue Stores Are Closing

Parent company Saks Global is also closing nearly all Saks Off 5th locations, a Neiman Marcus store, and 14 personal styling suites.

Tudor Heart pendant on display at British Museum
CollectionsFeb 12, 2026
British Museum Raises $5M to Keep Jewel Linked to Henry VIII, Katherine of Aragon

It is believed the 24-karat heart-shaped enameled pendant was made for an event marking the betrothal of Princess Mary in 1518.

AGTA Spectrum, Cutting Edge Buyers Choice winners 2025
SourcingFeb 12, 2026
‘Cotton Candy’ Necklace, 35-Carat Kunzite Win 2025 ‘Buyer’s Choice’ Awards

The AGTA Spectrum and Cutting Edge “Buyer’s Choice” award winners were announced at the Spectrum Awards Gala last week.

Kering Logo
Events & AwardsFeb 12, 2026
Kering Opens Entries for 2026 Sustainability-Focused Award

The “Kering Generation Award x Jewelry” returns for its second year with “Second Chance, First Choice” as its theme.

Halle Berry’s vintage diamond and sapphire engagement ring
TrendsFeb 11, 2026
Halle Berry’s Retro Engagement Ring Is a Sapphire-Set Stunner

Sourced by For Future Reference Vintage, the yellow gold ring has a round center stone surrounded by step-cut sapphires.

Francesca’s storefront
MajorsFeb 11, 2026
Francesca’s Files for Chapter 11 Bankruptcy Again

The clothing and accessories chain announced last month it would be closing all of its stores.

Zales x Sweethearts Capsule Collection Heart Charms
CollectionsFeb 11, 2026
Zales Turns Sweethearts Into Jewelry for Valentine’s Day Collection

The “Zales x Sweethearts” collection features three mystery heart charms engraved with classic sayings seen on the Valentine’s Day candies.

2026 Gemvision Symposium
TechnologyFeb 11, 2026
Gemvision Symposium 2026 Slated for April

The event will include panel discussions, hands-on demonstrations of new digital manufacturing tools, and a jewelry design contest.

The Jewelry Symposium
Events & AwardsFeb 11, 2026
TJS Announces Roundtable, Launches New App

Registration is now open for The Jewelry Symposium, set to take place in Detroit from May 16-19.

The Luanda Accord signatories at the African Mining Indaba in Cape Town, South Africa
SourcingFeb 10, 2026
At Meeting in South Africa, Support for Natural Diamonds Picks Up Steam

Namibia has formally signed the Luanda Accord, while two key industry organizations pledged to join the Natural Diamond Council.

Bad Bunny Performing Super Bowl LX Halftime Show
TrendsFeb 10, 2026
Bad Bunny Wears Football-Shaped ‘Desert Diamond’ for Halftime Performance

Lady Gaga, Cardi B, and Karol G also went with diamond jewelry for Bad Bunny’s Super Bowl halftime show honoring Puerto Rico.

×

This site uses cookies to give you the best online experience. By continuing to use & browse this site, we assume you agree to our Privacy Policy