Supplier BulletinAug 13, 2026
Your Piece Could Be the One Editors Talk AboutSponsored by American Gem Trade Association
CrimeDec 09, 2020
In the Wake of the Cyberattack on Stuller, 5 Tips on Cybersecurity
From password security to tracking-number safety, here are five cybersecurity tips to keep in mind.
The Jewelers’ Security Alliance shared tips on how to safely connect with customers online.
New York—Stuller was hit by a cyberattack over Thanksgiving weekend that delayed shipments, shut down the phone lines, and created other operational issues amid the holiday rush.
It took a few days for the massive manufacturer and supplier to get same-day shipping services on in-stock items and the phone lines back up and running.
While Stuller said there was no indication that sensitive business information was compromised—noting that customer credit cards on file are tokenized, encrypted, and not housed at Stuller—the stressful disruption came at the most critical time of the year for the supplier, underscoring the need for businesses today to invest in cybersecurity.
Stuller did not provide additional details on the specifics of the cyberattack.
In a COVID-19 world, and even before then, the ability to connect with customers online is crucial, whether one is running a consumer-facing retail store or a business-to-business operation.
Here are five expert tips on how to navigate the online world safely.
Ensure employees are adequately protected as they work from home.
Law enforcement officials have seen an uptick in fraud and hacking now that more people are working from home on computers or smartphones less secure than those in their office, the Jewelers’ Security Alliance said in a recent memo.
Be sure all employees’ devices have updated protections in place, including firewall, malware, and spam protection.
Stop using the same password for everything.
JSA advises having “strong, unique” passwords.
When the password for everything is the same, it may be easy to remember, but it’s also easy for hackers to gain access to several accounts in one swoop.
Users may also want to set up two-factor or multi-factor authentication.
“If a cybercriminal were to gain access to your log-in credentials, they wouldn’t be able to compromise your account if they didn’t have access to a passcode that would be sent to your phone,” explained Ryan Ruddock, senior research assistant at JSA, during an October webinar on online scams.
If you’re unsure about an email, just don’t open it.
Be wary of email phishing scams, which are attempts to trick users into giving criminals access to personal information.
“The intention behind phishing is to acquire personally identifiable information. So that’s going to include credit card information, social security numbers, account log-in credentials, and, in some cases, intellectual property,” said Ruddock.
It’s the most common type of cybercrime, said Ruddock, noting that it doesn’t target specific individuals.
Criminals will send a mass email in the
Editors' Picks
Sponsored by
hopes that some percentage will respond.
Misspellings and poor grammar are red flags to look for in phishing emails, he said, but also be wary of any email sent with a sense of urgency, pressuring users to act now, think later.
If an email doesn’t look trustworthy, don’t open it or click on any links. Delete it.
If a link in what is believed to be a phishing email is clicked, Ruddock recommended disconnecting from the WiFi, which could prevent malware from being installed on your computer, running an anti-virus scan, and changing passwords.
Also, be on the lookout for email spoofing, which involves an email sent from an address that’s almost, but not quite, identical to a genuine email address for a contact.
An email might look like it’s coming from longtime vendor, such as JohnSmith@jewelry.com, but upon closer inspection, it may actually read JohnSmith@jewellry.com.
If anything about the email seems off, it’s best to contact the vendor or customer by phone and be sure the request is genuine, JSA said.
Be careful with tracking numbers.
For any questions about a transaction, it’s best to reach out to the customer by phone via the number given at the time of purchase.
“You do not want to use the number given to you by the caller,” advised Ruddock.
JSA does not advise giving out the tracking number on a shipment. If a tracking number of a package is given to someone other than the customer, it may be possible for that person to redirect the merchandise.
JSA has also seen cases where a caller, pretending to be from a retail store, contacts a supplier and requests that a high-end item be sent to the store. The caller later diverts the shipment to a different address.
Set a limit on the number of times an address can be changed on a shipment, said Ruddock, and be clear with the shipper about how change of address requests should be handled.
Some companies, he said, have specified to their shipping company that if there are any attempts to change the address, the package should instead be returned to the company.
Make sure employees know the company’s cybersecurity policy.
Every company should have a written cybersecurity policy that is read and signed by employees, said JSA.
Be sure to regularly review the cyber-protocols with employees so everyone is on the same page.
Select cyber security firms also offer tests that allow employers to determine their employees’ ability to avoid phishing attacks and other scams.
Provide additional training to those employees who need it, advised Ruddock.
For more information about cybersecurity, visit the JSA website.
Misspellings and poor grammar are red flags to look for in phishing emails, he said, but also be wary of any email sent with a sense of urgency, pressuring users to act now, think later.
If an email doesn’t look trustworthy, don’t open it or click on any links. Delete it.
If a link in what is believed to be a phishing email is clicked, Ruddock recommended disconnecting from the WiFi, which could prevent malware from being installed on your computer, running an anti-virus scan, and changing passwords.
Also, be on the lookout for email spoofing, which involves an email sent from an address that’s almost, but not quite, identical to a genuine email address for a contact.
An email might look like it’s coming from longtime vendor, such as JohnSmith@jewelry.com, but upon closer inspection, it may actually read JohnSmith@jewellry.com.
If anything about the email seems off, it’s best to contact the vendor or customer by phone and be sure the request is genuine, JSA said.
Be careful with tracking numbers.
For any questions about a transaction, it’s best to reach out to the customer by phone via the number given at the time of purchase.
“You do not want to use the number given to you by the caller,” advised Ruddock.
JSA does not advise giving out the tracking number on a shipment. If a tracking number of a package is given to someone other than the customer, it may be possible for that person to redirect the merchandise.
JSA has also seen cases where a caller, pretending to be from a retail store, contacts a supplier and requests that a high-end item be sent to the store. The caller later diverts the shipment to a different address.
Set a limit on the number of times an address can be changed on a shipment, said Ruddock, and be clear with the shipper about how change of address requests should be handled.
Some companies, he said, have specified to their shipping company that if there are any attempts to change the address, the package should instead be returned to the company.
Make sure employees know the company’s cybersecurity policy.
Every company should have a written cybersecurity policy that is read and signed by employees, said JSA.
Be sure to regularly review the cyber-protocols with employees so everyone is on the same page.
Select cyber security firms also offer tests that allow employers to determine their employees’ ability to avoid phishing attacks and other scams.
Provide additional training to those employees who need it, advised Ruddock.
For more information about cybersecurity, visit the JSA website.
More on Crime
The Latest
FinancialsAug 13, 2026
Pandora’s ‘Talisman’ Collection Shines, Lab-Grown Diamond Sales FallIn the United States, second-quarter sales were flat amid soft consumer sentiment and lower in-store traffic.
AuctionsAug 13, 2026
This Gold Cadbury ‘Conundrum’ Egg Set a World Auction RecordThe 22-karat gold egg, sold at Batemans Auctioneers in the U.K., was part of a 1980s treasure hunt ad campaign for Cadbury Creme Eggs.
Brought to you by
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying EventsRetailers are seeking new ways to attract customers, increase traffic, and create revenue – Estate buying events are a popular solution.
SourcingAug 13, 2026
2,488-Carat Diamond, Largest Found in Botswana, Has a New Owner Lucara Diamond Corp., which recovered the “Motswedi” diamond from the Karowe mine, sold the stone for an undisclosed amount.
Weekly QuizAug 07, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
CollectionsAug 13, 2026
John Hardy Infuses ‘Icon,’ ‘Heishi’ Collections with ColorThe expanded collections now feature hand-cut gemstones like topaz, tanzanite, chrysoprase, chalcedony, smoky quartz, and fire opal.
Lab-GrownAug 13, 2026
Jean Dousset Opens Third StoreThe lab-grown diamond jewelry brand’s newest boutique is in Westfield Valley Fair in Santa Clara, California.
Brought to you by
Wedding Band Trends 2026: Personalization Takes Center StageColored gemstones, artisan finishes, mixed metals, and meaningful details are shaping demand in bridal jewelry.
SourcingAug 12, 2026
Eshed-Gemstar on the Painstaking Process of Cutting ‘The Legacy Emerald’The gemstone supplier and manufacturer acquired the remarkable 104-gram Zambian emerald at Gemfields’ auction in May.
SourcingAug 12, 2026
Another Diamond Mine Poised to CloseFinsch has been in business rescue since May, and owner Petra Diamonds said it sees no viable path forward for the mine.
MajorsAug 12, 2026
Frederick Goldman Names New SVP of SalesLongtime industry executive Beth Miller has taken on the role.
AuctionsAug 11, 2026
Verdura Unicorn Brooch With Royal Connection Up for Auction The brooch was owned by Virginia Fortune Ryan Ogilvy, who served as a lady of the bedchamber to Queen Elizabeth II for nearly 50 years.
MajorsAug 11, 2026
Signet Jewelers Selects Mattel Exec to Lead Zales, BanterJamie Cygielman will take on the role on Aug. 24.
IndependentsAug 11, 2026
Polly’s Fine Jewelry Co-Owner Richard Moore Dies at 69Moore, Polly’s husband, is remembered as a family man with an easygoing spirit and a love for sports and the outdoors.
ColumnistsAug 11, 2026
Creative Connecting: How to Sell Colored Gemstones to Gen ZDuvall O’Steen and Jen Cullen Williams share the best ways to display, present, and explain colored gemstones to younger customers.
Events & AwardsAug 11, 2026
NAJA Announces Lineup For 2026 Fall Virtual ConferenceThe mid-year conference for jewelry and watch appraisers will take place Sept. 5-6 on Zoom.
TechnologyAug 10, 2026
Colorado Jeweler Launches Customization Tool He Built HimselfHonest Hands Ring Co. Founder Benjamin Bosworth shared his thoughts on jewelry technology and why AI can never replace the human element.
MajorsAug 10, 2026
QVC Exits Chapter 11 Bankruptcy, Names New Interim CEOQVC Group President and CEO David Rawlinson is temporarily being replaced by a familiar face, former QVC CEO Mike George.
CollectionsAug 10, 2026
State Property Puts a Ripple in the ‘The Voyager’ CollectionThe brand also added two one-of-a-kind brown diamond pieces to the “Sanssouci” series of its “Gardens” collection.
MajorsAug 10, 2026
And IJO’s 2026 Vendor of the Year Is … Ostbye took home top vendor honors at the Independent Jewelers Organization’s show, held last month in Kentucky.
Supplier BulletinAug 07, 2026
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying EventsSponsored by Stratus Estate Buyers
MajorsAug 07, 2026
Retail Veteran Pam Cloud Appointed President of Blue NileCloud, who will officially join Blue Nile on Monday, spent 26 years at Tiffany & Co. and founded jewelry brand Roseate.
MajorsAug 07, 2026
Pandora Appoints Paulo Garcia as New CFO Garcia will take over from the company’s current CFO, Anders Boyer, who is retiring at the end of November.
MajorsAug 07, 2026
Etsy to Lay Off 12% of WorkforceEtsy CEO Kruti Patel Goyal explained why the company is letting go more than 200 employees as its performance improves.
TrendsAug 07, 2026
Look Ahead with Syna’s Binoculars PendantThe “Star Gazer” pendant, our Piece of the Week, is Syna’s tribute to curiosity and the discovery of something new.
CrimeAug 06, 2026
Lalique Museum to Remain Closed Following $5M HeistMuseum officials are looking to the public to help cover the “exceptional” costs involved in recovering from the July 5 smash-and-grab.
MajorsAug 06, 2026
Claire’s Revamps Piercing Services for Second Time in Three Years The overhaul includes enhanced employee safety training and trendy earring styles, including lab-grown diamond studs.
