SourcingJan 28, 2026
Ethical Gem Fair to Debut Designer Showcase in TucsonThe new addition will feature finished jewelry created using “consciously sourced” gemstones.
MajorsApr 03, 2018
Saks, Lord & Taylor the Latest Hit by Hackers
They reportedly gained access to the retailers’ cash register systems to steal payment card data from more than 5 million customers.
Hudson’s Bay Company announced Sunday that hackers had gained access to the debit and credit card numbers of customers at two of its retailers--Lord &Taylor and Saks.
New York--Saks Fifth Avenue and sister retailer Lord & Taylor just joined the long list of large companies that have been hacked.
On Sunday, parent company Hudson’s Bay Co. issued a short statement confirming that it had become aware of a “data security issue” involving the credit and debit card numbers of customers who shopped at certain Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores in North America.
While the investigation is ongoing, HBC said it doesn’t appear the breach impacted customers who shopped at any of its other stores or online, including on Gilt.com.
“The company deeply regrets any inconvenience or concern this might cause,” the statement reads. “Once the company has more clarity around the facts, it will notify customers quickly and will offer those impacted free identity protection services, including credit and web monitoring.”
HBC did not release any specifics about the number of consumers or location of stores impacted, but in a blog post also published Sunday, Gemini Advisory pinned the attack on a cybercrime syndicate known as JokerStash or Fin7.
The cybersecurity research firm said Fin7 announced March 28 it would be releasing for sale more than 5 million stolen debit and credit card numbers on the dark web, and already has put about 125,000 out there.
Fin7 didn’t say where it obtained the numbers, but Gemini said it confirmed with a “high degree of confidence” that the numbers came from Saks Fifth Avenue and Lord & Taylor. It estimated the breach occurred between May 2017 and now, impacting all Lord & Taylor and 83 Saks stores mainly in New York and New Jersey.
The research firm said it is “among the most significant credit card heists in modern history.”
A spokesperson for HBC declined to comment on Gemini’s statement.
Cybercrime is a growing problem for retailers, including retail jewelers.
In its recently released annual crime report for 2017, the Jewelers Security Alliance noted a “large dollar increase” in thefts by deception and impersonation made possible by the internet, with the average loss from this type of incident topping $1 million.
JSA President John J. Kennedy called it a “dangerous and growing crime trend” for the industry.
On Monday, he offered a number of cybersecurity tips for retailers. Some, he noted, might involve hiring an IT consulting firm.
Kennedy said retailers need to have proper firewalls and up-to-date anti-malware software for all systems, and they need to avoid visiting “questionable and risky sites.”
Jewelers
Editors' Picks
Sponsored by
also need to educate their staff on the common mistakes made that let hackers in.
Kennedy said one of the main methods cybercriminals employ is social engineering, in which they use various methods to win the trust of the company’s employees in order to gain unauthorized access to its IT system.
(The New York Times reported this is what was used by the hackers who targeted Saks and Lord & Taylor. The credit and debit card numbers were stolen via software implanted into the stores’ cash register systems that, most likely, was installed through phishing emails sent to HBC employees.)
He said staff need to be told, or reminded, not to open or click into unknown or suspicious emails.
They also need to be aware that emails can be spoofs—which use the exact email address of known individuals—or come from someone who has obtained an email address that is very similar to, but not exactly the same as, a known party’s address. They need to look for foreign domains, misspellings and other anomalies in emails.
When a transaction is involved, Kennedy recommends calling the person on the phone to confirm that it is not a fraud.
He also recommends having a written cybersecurity policy employees have to read and sign, and having regular staff meetings that include reviews of the company’s cybersecurity protocols.
Kennedy said one of the main methods cybercriminals employ is social engineering, in which they use various methods to win the trust of the company’s employees in order to gain unauthorized access to its IT system.
(The New York Times reported this is what was used by the hackers who targeted Saks and Lord & Taylor. The credit and debit card numbers were stolen via software implanted into the stores’ cash register systems that, most likely, was installed through phishing emails sent to HBC employees.)
He said staff need to be told, or reminded, not to open or click into unknown or suspicious emails.
They also need to be aware that emails can be spoofs—which use the exact email address of known individuals—or come from someone who has obtained an email address that is very similar to, but not exactly the same as, a known party’s address. They need to look for foreign domains, misspellings and other anomalies in emails.
When a transaction is involved, Kennedy recommends calling the person on the phone to confirm that it is not a fraud.
He also recommends having a written cybersecurity policy employees have to read and sign, and having regular staff meetings that include reviews of the company’s cybersecurity protocols.
More on Majors
The Latest
ColumnistsJan 28, 2026
Peter Smith: Setting the Next Generation Up for SuccessIn his new column, Smith advises playing to your successor's strengths and resisting the urge to become a backseat driver.
SurveysJan 28, 2026
Consumer Confidence Falls Below Pandemic Lows in JanuaryThe index fell to its lowest level since May 2014 amid concerns about the present and the future.
Brought to you by
The MJSA Mentor & Apprenticeship Program: Attracting & Training the Next Generation of Bench JewelersLaunched in 2023, the program will help the passing of knowledge between generations and alleviate the shortage of bench jewelers.
IndependentsJan 28, 2026
Foundrae Heads to Aspen for Latest Store OpeningThe new store in Aspen, Colorado, takes inspiration from a stately library for its intimate yet elevated interior design.
Weekly QuizJan 22, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
FinancialsJan 28, 2026
Tiffany & Co., Bulgari Sales Resilient as LVMH’s 2025 Sales SlipThe brands’ high jewelry collections performed especially well last year despite a challenging environment.
CollectionsJan 27, 2026
De Beers London, GemFair Debut New Collection Highlighting Artisanal DiamondsThe collection marks the first time GemFair’s artisanal diamonds will be brought directly to consumers.
Brought to you by
How Jewelers Can Fight Back Against Cell JammersCriminals are using cell jammers to disable alarms, but new technology like JamAlert™ can stop them.
SourcingJan 27, 2026
GemGuide Launches Pricing for Montana SapphiresThe initial charts are for blue, teal, and green material, each grouped into three charts categorized as good, fine, and extra fine.
TechnologyJan 27, 2026
Clientbook Launches Appointment Booking ToolThe new tool can assign the appropriate associate based on the client or appointment type and automate personalized text message follow-ups.
SourcingJan 26, 2026
Tucson Preview 2026: Earthy Tones and Innovative Shapes Buyers are expected to gravitate toward gemstones that have a little something special, just like last year.
SourcingJan 26, 2026
Angolan Diamond Cos. Join NDC as Rio Tinto, Murowa Exit Endiama and Sodiam will contribute money to the marketing of natural diamonds as new members of the Natural Diamond Council.
CollectionsJan 26, 2026
Tiffany & Co. Celebrates 189 Years of Love StoriesThe jeweler’s 2026 Valentine’s Day campaign, “Celebrating Love Stories Since 1837,” includes a short firm starring actress Adria Arjona.
GradingJan 26, 2026
DCA Updates Colored Gemstone CourseThe new features include interactive flashcards and scenario-based roleplay with AI tools.
MajorsJan 23, 2026
Watches of Switzerland Acquires 4-Store Jewelry Chain in TexasFamily-owned jewelry and watch retailer Deutsch & Deutsch has stores in El Paso, Laredo, McAllen, and Victoria.
WatchesJan 23, 2026
Damiani Group to Acquire Baume & MercierThe Italian luxury company purchased the nearly 200-year-old Swiss watch brand from Richemont.
TrendsJan 23, 2026
Martin Katz’s Earrings Call to Mind Wintry Weather Micro-set with hundreds of diamonds, these snowflake earrings recreate “winter’s most elegant silhouette,” and are our Piece of the Week.
MajorsJan 23, 2026
Rembrandt Charms Names New Director of Creative, Brand StrategyElla Blum was appointed to the newly created role.
Supplier BulletinJan 22, 2026
The Rise of Centralized Sourcing in the Colored Gemstone MarketSponsored by RapNet
MajorsJan 22, 2026
Lugano Diamonds Finds a BuyerInvestment firm Enhanced Retail Funding, a division of Gordon Brothers, was the successful bidder.
SourcingJan 22, 2026
De Beers To Release ‘A Diamond Is Forever’ BookIt explores the history of the iconic tagline and the company’s strategy to redefine the role of diamonds in society.
MajorsJan 22, 2026
Swarovski Appoints New North America PresidentRetail veteran Sindhu Culas has stepped into the role.
MajorsJan 22, 2026
Stuller Names New Chief Merchandising, Marketing, Sales OfficerTaylor Burgess, who has been at Stuller since 2013, was promoted to the newly created role.
PodcastsJan 21, 2026
Episode 1: High Gold Prices, the Diamond Dilemma, & What’s NextWas 2025 a good year for jewelers? Did lab-grown diamonds outsell natural? Find out on the first episode of the “My Next Question” podcast.
EditorsJan 21, 2026
6 Jewelry Designers Poised to Have a Breakout Year in 2026Whether you recognize their jewels or are just discovering them now, these designers’ talent and vision make them ones to watch this year.
CrimeJan 21, 2026
4 Men Charged in $1.7M California Smash-and-Grab Jewelry Store RobberyPlus, JSA’s Scott Guginsky discusses the need for jewelers to take more precautions as the gold price continues to climb.
IndependentsJan 21, 2026
Delaware Jeweler Felice Morris Dies at 91Morris’ most cherished role was being a mother and grandmother, her family said.
