Majors

Saks, Lord & Taylor the Latest Hit by Hackers

MajorsApr 03, 2018

Saks, Lord & Taylor the Latest Hit by Hackers

They reportedly gained access to the retailers’ cash register systems to steal payment card data from more than 5 million customers.

2018_Lord_and_Taylor.jpg
Hudson’s Bay Company announced Sunday that hackers had gained access to the debit and credit card numbers of customers at two of its retailers--Lord &Taylor and Saks.

New York--Saks Fifth Avenue and sister retailer Lord & Taylor just joined the long list of large companies that have been hacked.

On Sunday, parent company Hudson’s Bay Co. issued a short statement confirming that it had become aware of a “data security issue” involving the credit and debit card numbers of customers who shopped at certain Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores in North America.

While the investigation is ongoing, HBC said it doesn’t appear the breach impacted customers who shopped at any of its other stores or online, including on Gilt.com.

“The company deeply regrets any inconvenience or concern this might cause,” the statement reads. “Once the company has more clarity around the facts, it will notify customers quickly and will offer those impacted free identity protection services, including credit and web monitoring.”

HBC did not release any specifics about the number of consumers or location of stores impacted, but in a blog post also published Sunday, Gemini Advisory pinned the attack on a cybercrime syndicate known as JokerStash or Fin7.

The cybersecurity research firm said Fin7 announced March 28 it would be releasing for sale more than 5 million stolen debit and credit card numbers on the dark web, and already has put about 125,000 out there.

Fin7 didn’t say where it obtained the numbers, but Gemini said it confirmed with a “high degree of confidence” that the numbers came from Saks Fifth Avenue and Lord & Taylor. It estimated the breach occurred between May 2017 and now, impacting all Lord & Taylor and 83 Saks stores mainly in New York and New Jersey.

The research firm said it is “among the most significant credit card heists in modern history.”

A spokesperson for HBC declined to comment on Gemini’s statement.

Cybercrime is a growing problem for retailers, including retail jewelers.

In its recently released annual crime report for 2017, the Jewelers Security Alliance noted a “large dollar increase” in thefts by deception and impersonation made possible by the internet, with the average loss from this type of incident topping $1 million.

JSA President John J. Kennedy called it a “dangerous and growing crime trend” for the industry.

On Monday, he offered a number of cybersecurity tips for retailers. Some, he noted, might involve hiring an IT consulting firm.

Kennedy said retailers need to have proper firewalls and up-to-date anti-malware software for all systems, and they need to avoid visiting “questionable and risky sites.”

Jewelers

also need to educate their staff on the common mistakes made that let hackers in.

Kennedy said one of the main methods cybercriminals employ is social engineering, in which they use various methods to win the trust of the company’s employees in order to gain unauthorized access to its IT system.

(The New York Times reported this is what was used by the hackers who targeted Saks and Lord & Taylor. The credit and debit card numbers were stolen via software implanted into the stores’ cash register systems that, most likely, was installed through phishing emails sent to HBC employees.)

He said staff need to be told, or reminded, not to open or click into unknown or suspicious emails.

They also need to be aware that emails can be spoofs—which use the exact email address of known individuals—or come from someone who has obtained an email address that is very similar to, but not exactly the same as, a known party’s address. They need to look for foreign domains, misspellings and other anomalies in emails.

When a transaction is involved, Kennedy recommends calling the person on the phone to confirm that it is not a fraud.

He also recommends having a written cybersecurity policy employees have to read and sign, and having regular staff meetings that include reviews of the company’s cybersecurity protocols.
Michelle Graffis the editor-in-chief at National Jeweler, directing the publication’s coverage both online and in print.

The Latest

Graphic for Episode 8 of the My Next Question podcast
PodcastsAug 20, 2026
Episode 8: Diamond Industry Update With David Bonaparte & Ronnie VanderLinden

The industry veterans join the podcast to discuss diamond marketing, the FTC Jewelry Guides, and lobbying for lower tariffs.

Gemstone AI app screenshots
TechnologyAug 20, 2026
A New AI-Powered Gemstone Identification App Is Here

Founder Vik Westermann said the app is a “starting point” to inspire people to work with appraisers and gem labs, not replace them.

Verdura unicorn brooch
AuctionsAug 20, 2026
Storied Unicorn Brooch Up for Auction Gallops to New Home

The Verdura brooch, which belonged to the late Virginia Fortune Ryan Ogilvy, was sold to a private collector in Asia.

Cover.jpg
Brought to you by
Your Piece Could Be the One Editors Talk About

Submit your pieces for a chance to win in this year's competition.

Lianna Carter, Lauren Edwards, Thomas Koslowski, Erin Perry, Heran Wang
Events & AwardsAug 20, 2026
MJSA Education Foundation Names 5 Scholarship Winners

The five students were awarded a total of $10,000 through the nonprofit’s 2026 “Future of Jewelry Making” scholarship.

Weekly QuizAug 20, 2026
This Week’s Quiz
Test your jewelry news knowledge by answering these questions.
Take the Quiz
Spinelli Kilcollin Trade-In Bar Program Imagery
Policies & IssuesAug 19, 2026
Spinelli Kilcollin Embraces Dupes With Trade-In Program

The jeweler is encouraging customers who own lookalike rings to come into the store and trade them for credit towards an authentic piece.

Woman wearing Zales jewelry
MajorsAug 19, 2026
Zales Wants You to Wear Fine Jewelry Every Day

The new campaign, “You Are The Occasion,” discourages shoppers from saving their fine jewelry for special occasions only.

1872-x-1052-July-ad (1).png
Brought to you by
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying Events

Retailers are seeking new ways to attract customers, increase traffic, and create revenue – Estate buying events are a popular solution.

Former GJEPC Chairman and second-generation Indian diamantaire Vasant Mehta
SourcingAug 19, 2026
Vasant Mehta, a Dedicated Diamond Industry Leader, Dies at 81

Mehta led India’s GJEPC through the 2008 financial crisis and was respected worldwide for his wisdom, integrity, and knowledge.

Alfredo Colmenero-Martinez and Jarren Frazier
CrimeAug 18, 2026
2 California Men Arrested in Fatal Vehicle Smash Robbery

One is the driver who allegedly crashed a car into a Sacramento jewelry store in April, striking a 71-year-old employee who later died.

The Retail Smiths Principal Partner and National Jeweler columnist Peter Smith
ColumnistsAug 18, 2026
Peter Smith: The IKEA Effect and Bridal Branding

In a new column, Peter Smith posits that people actually enjoy putting together IKEA furniture, and the same is true for engagement rings.

Police car with lights on
CrimeAug 18, 2026
Thieves Snatch $1M in Jewelry From New Jersey Jeweler

9lakha Jewelers in Iselin, New Jersey, was the target of a smash-and-grab robbery on Aug. 8.

Ring Concierge x 818 Tequila Bridal Giveaway
Lab-GrownAug 18, 2026
Ring Concierge, Kendall Jenner’s Tequila Brand Collab on Giveaway

The jeweler has partnered with 818 Tequila to gift lab-grown diamond studs to a bride-to-be and their bridal party.

Louis Comfort Tiffany Poppy lampshade drawing
Events & AwardsAug 17, 2026
Exhibition on Louis Comfort Tiffany’s Studios to Open at The Met

The exhibition will feature more than 100 drawings of stained-glass lampshades, windows, and more, many created by women and émigrés.

Spinelli Kilcollin Inara Ring
CollectionsAug 17, 2026
Marquise Diamonds Dance in Spinelli Kilcollin’s ‘Wren’ Collection

Marquise-cut diamonds in drop charms are the center of the new collection, reflecting the movement of a dancer in modular styles.

Ft. Lauderdale Jewelry, Antique, & Object Show logo
Events & AwardsAug 17, 2026
There’s a New Jewelry Show Coming to Florida

The inaugural Fort Lauderdale Jewelry, Antique, & Object Show will be held from Jan. 28 through Feb. 1, 2027.

Karl Getschel and Bob Yanega of Smyth Jewelers
IndependentsAug 14, 2026
Smyth Jewelers to Open Fourth Location

The family-owned jeweler will open a new showroom in Bel Air, Maryland, this fall.

Stock image of a gavel
CrimeAug 14, 2026
Wife of Man Convicted in Jeweler’s Murder Sentenced for Conspiracy

Amanda Ileana Hernandez is married to Carlos Hernandez, one of two men in prison for the 2024 murder of Michigan jeweler Hussein Murray.

Paul Morelli Wavey Vine Earrings
TrendsAug 14, 2026
Paul Morelli’s Latest ‘Wavey Vine’ Earrings Embrace Color

The reimagined jewel, our Piece of the Week, trades the diamonds in the original 1998 design for blue, pink, yellow, and green sapphires.

Cover.jpg
Supplier BulletinAug 13, 2026
Your Piece Could Be the One Editors Talk About

Sponsored by American Gem Trade Association

Two Pandora Talisman pendants
FinancialsAug 13, 2026
Pandora’s ‘Talisman’ Collection Shines, Lab-Grown Diamond Sales Fall

In the United States, second-quarter sales were flat amid soft consumer sentiment and lower in-store traffic.

Cuckoo Cuckoo Cadbury Conundrum egg
AuctionsAug 13, 2026
This Gold Cadbury ‘Conundrum’ Egg Set a World Auction Record

The 22-karat gold egg, sold at Batemans Auctioneers in the U.K., was part of a 1980s treasure hunt ad campaign for Cadbury Creme Eggs.

Picture of 2,488 carat rough diamond next to tweezers, a golf ball, and a loupe
SourcingAug 13, 2026
2,488-Carat Diamond, Largest Found in Botswana, Has a New Owner

Lucara Diamond Corp., which recovered the “Motswedi” diamond from the Karowe mine, sold the stone for an undisclosed amount.

John Hardy Heishi Collection Campaign Imagery
CollectionsAug 13, 2026
John Hardy Infuses ‘Icon,’ ‘Heishi’ Collections with Color

The expanded collections now feature hand-cut gemstones like topaz, tanzanite, chrysoprase, chalcedony, smoky quartz, and fire opal.

Jean Dousset Westfield Valley Fair
Lab-GrownAug 13, 2026
Jean Dousset Opens Third Store

The lab-grown diamond jewelry brand’s newest boutique is in Westfield Valley Fair in Santa Clara, California.

Legacy emerald
SourcingAug 12, 2026
Eshed-Gemstar on the Painstaking Process of Cutting ‘The Legacy Emerald’

The gemstone supplier and manufacturer acquired the remarkable 104-gram Zambian emerald at Gemfields’ auction in May.

Surveillance image of jewelry thieves
CrimeAug 12, 2026
Elderly NYC Woman Targeted in Jewelry Swap Scheme

Two suspects offered to trade the woman a “winning” lottery ticket for her jewelry.

×

This site uses cookies to give you the best online experience. By continuing to use & browse this site, we assume you agree to our Privacy Policy