Technology

Graff’s Ransomware Payment Not an Unusual Move, Expert Says

TechnologyJul 12, 2022

Graff’s Ransomware Payment Not an Unusual Move, Expert Says

The high-end jeweler reportedly paid a $7.5 million ransom to a group of hackers and is suing its insurance company to cover the loss.

London—Graff Diamonds reportedly paid a $7.5 million ransom in Bitcoin to the hackers responsible for a ransomware attack on its systems last fall, a decision that is not unusual for large companies today, one expert says.

Ransomware is malware that uses encryption to hold a victim’s system or personal data hostage, basically, and demands payment to get them back.

Following the attack on Graff, Conti, the group that took credit for it, leaked data about the brand’s clients, such as their names and, potentially, their home addresses.

Graff counts many high-end clients and celebrities as customers, and the data breach included leaked data about the royal families in Saudi Arabia, the United Arab Emirates, and Qatar, prompting Conti to issue an apology to the families involved, an unusual move for the group.

Conti threatened to leak more of Graff’s data if the ransom wasn’t paid.

Though it tried to avoid paying, the high-end jeweler eventually offered $7.5 million, half the original ransom amount, and Conti accepted, according to Bloomberg, which broke the story. The jeweler paid in Bitcoin. 

Graff is also suing its insurance company, The Travelers Companies Inc., in a London court for the losses, arguing that its policy should cover the ransom payment. 

“The criminals threatened targeted publication of our customers’ private purchases. We were determined to take all possible steps to protect their interests and so negotiated a payment that successfully neutralized that threat,” a Graff spokesperson told National Jeweler. 

“Regrettably, these commercial decisions are all too common these days. Insurers know this, which is why we are extremely frustrated and disappointed by Travelers’ attempt to avoid settlement of this insured risk. They have left us with no option but to bring these recovery proceedings at the High Court.”

The Travelers Companies did not respond to a request for comment by press time.

 Related stories will be right here … 

Shayne Caffrey, marketing manager and cybersecurity awareness training lead for LeeShanok Network Solutions, echoed what Graff Diamonds said it its statement—ransom payouts like this are fairly common today.

“Deciding whether to pay the ransom is a cost/benefit analysis. It can make a lot of sense to pay up when you can’t safely restore from a backup,” he said in an email to National Jeweler.

Once a business does decide to pay, it becomes a negotiation, going back and forth on price like in any deal until it becomes worth it for both sides. 

“In this case, the initial $15 million demand may not have been worth it, but $7.5 million was,” Caffrey said. “Hackers would rather get something than nothing. This calculated approach means ransoms get paid more often than any of us would like.”

He also noted there’s rarely a guarantee that hackers will unencrypt the data even once the ransom is paid.

Caffey offered businesses two recommendations to reduce the chances of becoming a victim of cybercrime.

The first is to require every employee to undergo cybersecurity awareness training annually, with a particular focus on phishing prevention.

According to IBM, 95 percent of breaches result from human error, and the only way to fix that is through education, he noted.

But rather than using the common online training modules, Caffrey suggested bringing in a cybersecurity expert to deliver a live training, either in-person or virtually.

“In my experience, those trainings are much stickier.”

The second tip is to create a strong Backup and Disaster Recovery (BCDR) Strategy.

“Implementing these strategies can seem expensive on the surface, but they are often a fraction of the cost of paying a ransom, or even paying increased insurance premiums after a breach,” Caffrey said.

“Plus, it feels a lot better to restore your environment to a pre-ransomware instance than to reward the hackers by paying a ransom.”

More tips businesses can use to protect themselves from the Jewelers Security Alliance can be found in National Jeweler’s original story reporting on the Graff attack.
Brecken Branstratoris the senior editor, gemstones at National Jeweler, covering sourcing, pricing and other developments in the colored stone sector.

The Latest

AuctionsSep 30, 2022
Red Diamond Earns $1.8M at Auction

The final hammer price blew the pre-sale estimate out of the water.

EditorsSep 30, 2022
The Best of Betty White’s Jewelry Sold at Auction

Michelle Graff recaps the cats, fortune cookies, and charm bracelets that caught her eye while covering the late actress’ estate sale.

Policies & IssuesSep 30, 2022
Voting Is Open for the Fairmined 100 Challenge’s Best Collection

The winners, picked by a group of judges and voted as the public’s favorite, will be announced in a webinar on Oct. 11.

Brought to you by
6 Steps to Start a Dynamic Company Culture

Learn how to better serve your employees, customers and community by having a dynamic and supportive company culture.

CollectionsSep 30, 2022
Piece of the Week: Fewer Finer’s ‘Family Bracelet’

The engravable piece is a perfect family heirloom.

Weekly QuizSep 29, 2022
This Week’s Quiz
Test your knowledge of the latest jewelry news with this quick test.
Take the Quiz
GradingSep 30, 2022
GSI India Names Ramit Kapur Managing Director

Kapur has spent nearly two decades working in the gemological labs sector of the jewelry industry.

Supplier BulletinSep 29, 2022
How to Create an Engaging Experience and a Sparkling Reputation

Sponsored by Synchrony

Brought to you by
Committing to an Ethical Diamond Business

While ethical mining is essential to a diamond business, they represent only a fraction of the responsibility bestowed on jewelers.

SourcingSep 29, 2022
Q&A: Constantin Wild Celebrates 175 Years in the Colored Stone Business

The family business’ fourth-generation eponymous owner reflects on the milestone and the market today.

AuctionsSep 29, 2022
See the Top Lots in Christie’s Upcoming Rare Watch Sale

According to Christie’s, the auction is its most important single-owner watch collection ever.

CollectionsSep 29, 2022
Trove Has a New Proposal: Ring Boxes

The jewelry box brand is expanding with both single and double ring boxes in red, mint green, and white.

SourcingSep 29, 2022
AGTA Names Jennifer Heebner Editor-in-Chief of its Publications

The association has also hired a new marketing manager and announced two staff transitions.

Policies & IssuesSep 29, 2022
JA Members Return to Capitol Hill to Voice Jewelers’ Concerns

The topics up for discussion with lawmakers included inflation, rising interest rates, hiring challenges, and crime.

AuctionsSep 28, 2022
The 18-Carat ‘Fortune Pink’ Diamond Could Sell for $35M

The pear-shaped fancy vivid pink diamond will lead the Christie’s Geneva Magnificent Jewels auction on Nov. 8.

SurveysSep 28, 2022
Consumer Confidence Rises in September

U.S. consumer confidence rose for the second consecutive month as gas prices fell.

MajorsSep 28, 2022
Artistry’s 2023 Catalog Is Out Now

The jewelry catalog features an updated layout and 160 pages of product.

MajorsSep 28, 2022
JFC’s 2022 ‘Hope for the Holidays’ Program Is an Adorable Menagerie

There are three designs to choose from this year, all featuring animals drawn by kids who have had wishes granted through Make-A-Wish.

AuctionsSep 27, 2022
In Betty White’s Blockbuster Estate Sale, Jewelry Held Its Own

Fine jewelry comprised three of the auction’s top 10 lots, though it could not top her director’s chair or scripts from “The Golden Girls.”

CrimeSep 27, 2022
3 Suspects in Beverly Hills Smash-and-Grab Robbery Arrested

A total of four suspects are now in custody with police still on the lookout for the remaining two.

ColumnistsSep 27, 2022
Creative Connecting: Fun Ideas for Holiday 2022 In-Store Events

From a “whodunnit” murder mystery to a permanent jewelry party, Duvall O’Steen and Jen Cullen Williams share a wealth of suggestions.

MajorsSep 27, 2022
Stuller Releases 2 Updated Catalogs Ahead of the Holiday Season

“Mountings 2023-2024” and “Diamonds & Gemstones 2023-2024” offer a vast selection of options to create custom pieces.

Events & AwardsSep 27, 2022
ICA’s 2023 Congress Will Be Held in Dubai

The event will be hosted by the Dubai Multi Commodities Centre from Feb. 15-17.

IndependentsSep 26, 2022
Roberson’s Fine Jewelry to Close After 42 Years

The store’s liquidation sale will showcase the mix of classic and unique jewels it’s known for stocking.

CollectionsSep 26, 2022
Go ‘Inside the Dream’ of Bulgari Via a New Documentary on Amazon Prime

It follows Creative Director Lucia Silvestri as she crafts the brand’s high jewelry collections.

Recorded WebinarsSep 26, 2022
Watch: What Jewelers Should Know About Insurance

From safeguarding showcases to appraisal liability, insurance experts Mark Devereaux and Andrew Chipman share insurance tips for jewelers.

TrendsSep 26, 2022
Vahan Collabs With Wolf on a Jewelry Box

It’s the first time in 50 years the brand has made something other than jewelry.

Events & AwardsSep 26, 2022
Texas Jewelers Association Rolls Out New Format for Design Competition

The competition takes place in tandem with TJA’s annual convention, known as the Texas Jewelers Roundup.

×

This site uses cookies to give you the best online experience. By continuing to use & browse this site, we assume you agree to our Privacy Policy