AuctionsMay 16, 2024
Christie’s Holds 2 Sales Despite CyberattackThough its website has been down for a week, Christie’s proceeded with its jewelry and watch auctions on May 13-14, bringing in nearly $80 million.
MajorsApr 03, 2018
Saks, Lord & Taylor the Latest Hit by Hackers
They reportedly gained access to the retailers’ cash register systems to steal payment card data from more than 5 million customers.
Hudson’s Bay Company announced Sunday that hackers had gained access to the debit and credit card numbers of customers at two of its retailers--Lord &Taylor and Saks.
New York--Saks Fifth Avenue and sister retailer Lord & Taylor just joined the long list of large companies that have been hacked.
On Sunday, parent company Hudson’s Bay Co. issued a short statement confirming that it had become aware of a “data security issue” involving the credit and debit card numbers of customers who shopped at certain Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores in North America.
While the investigation is ongoing, HBC said it doesn’t appear the breach impacted customers who shopped at any of its other stores or online, including on Gilt.com.
“The company deeply regrets any inconvenience or concern this might cause,” the statement reads. “Once the company has more clarity around the facts, it will notify customers quickly and will offer those impacted free identity protection services, including credit and web monitoring.”
HBC did not release any specifics about the number of consumers or location of stores impacted, but in a blog post also published Sunday, Gemini Advisory pinned the attack on a cybercrime syndicate known as JokerStash or Fin7.
The cybersecurity research firm said Fin7 announced March 28 it would be releasing for sale more than 5 million stolen debit and credit card numbers on the dark web, and already has put about 125,000 out there.
Fin7 didn’t say where it obtained the numbers, but Gemini said it confirmed with a “high degree of confidence” that the numbers came from Saks Fifth Avenue and Lord & Taylor. It estimated the breach occurred between May 2017 and now, impacting all Lord & Taylor and 83 Saks stores mainly in New York and New Jersey.
The research firm said it is “among the most significant credit card heists in modern history.”
A spokesperson for HBC declined to comment on Gemini’s statement.
Cybercrime is a growing problem for retailers, including retail jewelers.
In its recently released annual crime report for 2017, the Jewelers Security Alliance noted a “large dollar increase” in thefts by deception and impersonation made possible by the internet, with the average loss from this type of incident topping $1 million.
JSA President John J. Kennedy called it a “dangerous and growing crime trend” for the industry.
On Monday, he offered a number of cybersecurity tips for retailers. Some, he noted, might involve hiring an IT consulting firm.
Kennedy said retailers need to have proper firewalls and up-to-date anti-malware software for all systems, and they need to avoid visiting “questionable and risky sites.”
Jewelers
Editors' Picks
Sponsored by
also need to educate their staff on the common mistakes made that let hackers in.
Kennedy said one of the main methods cybercriminals employ is social engineering, in which they use various methods to win the trust of the company’s employees in order to gain unauthorized access to its IT system.
(The New York Times reported this is what was used by the hackers who targeted Saks and Lord & Taylor. The credit and debit card numbers were stolen via software implanted into the stores’ cash register systems that, most likely, was installed through phishing emails sent to HBC employees.)
He said staff need to be told, or reminded, not to open or click into unknown or suspicious emails.
They also need to be aware that emails can be spoofs—which use the exact email address of known individuals—or come from someone who has obtained an email address that is very similar to, but not exactly the same as, a known party’s address. They need to look for foreign domains, misspellings and other anomalies in emails.
When a transaction is involved, Kennedy recommends calling the person on the phone to confirm that it is not a fraud.
He also recommends having a written cybersecurity policy employees have to read and sign, and having regular staff meetings that include reviews of the company’s cybersecurity protocols.
Kennedy said one of the main methods cybercriminals employ is social engineering, in which they use various methods to win the trust of the company’s employees in order to gain unauthorized access to its IT system.
(The New York Times reported this is what was used by the hackers who targeted Saks and Lord & Taylor. The credit and debit card numbers were stolen via software implanted into the stores’ cash register systems that, most likely, was installed through phishing emails sent to HBC employees.)
He said staff need to be told, or reminded, not to open or click into unknown or suspicious emails.
They also need to be aware that emails can be spoofs—which use the exact email address of known individuals—or come from someone who has obtained an email address that is very similar to, but not exactly the same as, a known party’s address. They need to look for foreign domains, misspellings and other anomalies in emails.
When a transaction is involved, Kennedy recommends calling the person on the phone to confirm that it is not a fraud.
He also recommends having a written cybersecurity policy employees have to read and sign, and having regular staff meetings that include reviews of the company’s cybersecurity protocols.
More on Majors
The Latest
AuctionsMay 16, 2024
Sotheby’s Withdraws 101-Carat Yellow Diamond from AuctionDespite the absence of “The Allnatt,” Sotheby’s Geneva jewelry auction totaled $34 million, with 90 percent of lots sold.
ColumnistsMay 16, 2024
The PR Adviser: What the Designer Should’ve DoneLilian Raji gives advice to designers on how to make the most of great publicity opportunities.
Brought to you by
Record Gold Prices Have Consumers Undeterred. Here’s Why.Despite the rising prices, consumers continue to seek out the precious metal.
SourcingMay 16, 2024
Lucapa to Shed Stake in Lesotho Diamond Mine The mining company wants to divest its 70 percent holding in the Mothae Diamond Mine in an effort to streamline its portfolio.
Weekly QuizMay 16, 2024
This Week’s QuizTest your jewelry news knowledge by answering these seven questions.
ColumnistsMay 15, 2024
Squirrel Spotting: Why Retailers Struggle to Fire BrandsWhy do so many jewelers keep lines that are not selling? Peter Smith thinks the answer lies in these two behavioral principles.
AuctionsMay 15, 2024
Red Diamond Breaks Records at Phillips GenevaThe “Argyle Phoenix” sold for more than $4 million at the auction house’s second jewels sale.
Brought to you by
From Registration to Return: 10 Tips to Protect You Before, During and After a TradeshowTradeshow risks are real. Get tips to protect yourself before, during and after and gain safety and security awareness for your business.
Events & AwardsMay 15, 2024
See Who’s in JA’s 2024 ‘20 Under 40’ ClassThe annual list recognizes young professionals making an impact in jewelry retail.
IndependentsMay 15, 2024
David Mann Jewelers in Upstate NY to Close After 35 YearsOwner David Mann is heading into retirement.
FinancialsMay 15, 2024
Brilliant Earth’s Sales Fall Flat in Q1 While overall sales were sluggish, the retailer said its non-bridal fine jewelry was a popular choice for Valentine’s Day.
SourcingMay 14, 2024
Anglo American Confirms It Is Looking to Sell De Beers The mining giant also wants to offload its platinum business as part of an overhaul designed to “unlock significant value.”
AuctionsMay 14, 2024
2 Huge Yellow Diamonds Are Heading to AuctionChristie's is selling one of the diamonds, moving forward with its Geneva jewelry auction despite the cyberattack that took down its website.
GradingMay 14, 2024
Instappraise Adds Trifold Brochure to Appraisal OfferingsRetailers can customize and print the appraisal brochures from their store.
Lab-GrownMay 13, 2024
Lab-Grown Diamond Brand Lightbox Cuts Prices by 25 to 40%The move follows a price-drop test run in Q4 and comes with the addition of a “quality assurance card” from GIA for some loose diamonds.
TechnologyMay 13, 2024
Christie’s Website Brought Down by Hackers, Watch Auction Postponed The site has been down since Thursday evening, just ahead of its spring auctions.
AuctionsMay 13, 2024
Madeleine Albright’s Jewelry, Pins a White-Glove Sale at Freeman’s | HindmanThe late former U.S. Secretary’s collection went for quadruple the sale’s pre-sale estimate.
IndependentsMay 13, 2024
Zachary’s Jewelers Names Mother’s Day Jewelry Contest WinnersThree fifth graders’ winning designs were turned into custom jewelry pieces in time for Mother’s Day.
IndependentsMay 10, 2024
Frank Adams Jewelers Names New CEOKimberly Adams Russell is taking over the role from her father, David Adams, marking the third generation to hold the title.
CollectionsMay 10, 2024
Piece of the Week: Carina Hardy’s ‘Birth of Venus’ NecklaceAs a token of womanhood, this necklace depicts when Venus was born from the sea.
TrendsMay 09, 2024
Amanda’s Style File: Shine Bright, Moms Show your mother some love with a piece of fine jewelry.
IndependentsMay 09, 2024
Kyle Edward Fine Jewelry to Close Salisbury StoreThe company’s Easton location will remain open.
MajorsMay 09, 2024
JBT Elects New ChairmanBrian D. Fleming of Carla Corporation was elected to serve a one-year term in the role.
Supplier BulletinMay 08, 2024
Fusing Past and Present at the Las Vegas Antique Jewelry & Watch ShowSponsored by the Las Vegas Antique Jewelry and Watch Show
EditorsMay 07, 2024
Q&A: Author Vikki Tobak on the ‘Ice-Cold’ ExhibitionTobak, author of “Ice Cold: A Hip-Hop Jewelry History,” shares how the exhibition came to be, and the pieces people may be surprised to see.
EditorsMay 07, 2024
10 On-Theme Looks from the 2024 Met GalaStars adorned themselves in emeralds, platinum, and myriad bird motifs, writes Associate Editor Natalie Francisco.
IndependentsMay 07, 2024
112-Year-Old New Orleans Business Popping Up in Aspen M.S. Rau is set to open a seasonal gallery in the high-end resort town early next month.
