Supplier BulletinAug 07, 2026
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying EventsSponsored by Stratus Estate Buyers
MajorsApr 03, 2018
Saks, Lord & Taylor the Latest Hit by Hackers
They reportedly gained access to the retailers’ cash register systems to steal payment card data from more than 5 million customers.
Hudson’s Bay Company announced Sunday that hackers had gained access to the debit and credit card numbers of customers at two of its retailers--Lord &Taylor and Saks.
New York--Saks Fifth Avenue and sister retailer Lord & Taylor just joined the long list of large companies that have been hacked.
On Sunday, parent company Hudson’s Bay Co. issued a short statement confirming that it had become aware of a “data security issue” involving the credit and debit card numbers of customers who shopped at certain Saks Fifth Avenue, Saks Off 5th and Lord & Taylor stores in North America.
While the investigation is ongoing, HBC said it doesn’t appear the breach impacted customers who shopped at any of its other stores or online, including on Gilt.com.
“The company deeply regrets any inconvenience or concern this might cause,” the statement reads. “Once the company has more clarity around the facts, it will notify customers quickly and will offer those impacted free identity protection services, including credit and web monitoring.”
HBC did not release any specifics about the number of consumers or location of stores impacted, but in a blog post also published Sunday, Gemini Advisory pinned the attack on a cybercrime syndicate known as JokerStash or Fin7.
The cybersecurity research firm said Fin7 announced March 28 it would be releasing for sale more than 5 million stolen debit and credit card numbers on the dark web, and already has put about 125,000 out there.
Fin7 didn’t say where it obtained the numbers, but Gemini said it confirmed with a “high degree of confidence” that the numbers came from Saks Fifth Avenue and Lord & Taylor. It estimated the breach occurred between May 2017 and now, impacting all Lord & Taylor and 83 Saks stores mainly in New York and New Jersey.
The research firm said it is “among the most significant credit card heists in modern history.”
A spokesperson for HBC declined to comment on Gemini’s statement.
Cybercrime is a growing problem for retailers, including retail jewelers.
In its recently released annual crime report for 2017, the Jewelers Security Alliance noted a “large dollar increase” in thefts by deception and impersonation made possible by the internet, with the average loss from this type of incident topping $1 million.
JSA President John J. Kennedy called it a “dangerous and growing crime trend” for the industry.
On Monday, he offered a number of cybersecurity tips for retailers. Some, he noted, might involve hiring an IT consulting firm.
Kennedy said retailers need to have proper firewalls and up-to-date anti-malware software for all systems, and they need to avoid visiting “questionable and risky sites.”
Jewelers
also need to educate their staff on the common mistakes made that let hackers in.
Kennedy said one of the main methods cybercriminals employ is social engineering, in which they use various methods to win the trust of the company’s employees in order to gain unauthorized access to its IT system.
(The New York Times reported this is what was used by the hackers who targeted Saks and Lord & Taylor. The credit and debit card numbers were stolen via software implanted into the stores’ cash register systems that, most likely, was installed through phishing emails sent to HBC employees.)
He said staff need to be told, or reminded, not to open or click into unknown or suspicious emails.
They also need to be aware that emails can be spoofs—which use the exact email address of known individuals—or come from someone who has obtained an email address that is very similar to, but not exactly the same as, a known party’s address. They need to look for foreign domains, misspellings and other anomalies in emails.
When a transaction is involved, Kennedy recommends calling the person on the phone to confirm that it is not a fraud.
He also recommends having a written cybersecurity policy employees have to read and sign, and having regular staff meetings that include reviews of the company’s cybersecurity protocols.
Kennedy said one of the main methods cybercriminals employ is social engineering, in which they use various methods to win the trust of the company’s employees in order to gain unauthorized access to its IT system.
(The New York Times reported this is what was used by the hackers who targeted Saks and Lord & Taylor. The credit and debit card numbers were stolen via software implanted into the stores’ cash register systems that, most likely, was installed through phishing emails sent to HBC employees.)
He said staff need to be told, or reminded, not to open or click into unknown or suspicious emails.
They also need to be aware that emails can be spoofs—which use the exact email address of known individuals—or come from someone who has obtained an email address that is very similar to, but not exactly the same as, a known party’s address. They need to look for foreign domains, misspellings and other anomalies in emails.
When a transaction is involved, Kennedy recommends calling the person on the phone to confirm that it is not a fraud.
He also recommends having a written cybersecurity policy employees have to read and sign, and having regular staff meetings that include reviews of the company’s cybersecurity protocols.
More on Majors
The Latest
MajorsAug 07, 2026
Etsy to Lay Off 12% of WorkforceEtsy CEO Kruti Patel Goyal explained why the company is letting go more than 200 employees as its performance improves.
TrendsAug 07, 2026
Look Ahead with Syna’s Binoculars PendantThe “Star Gazer” pendant, our Piece of the Week, is Syna’s tribute to curiosity and the discovery of something new.
Brought to you by
Why More Jewelry Retailers Are Hosting Turnkey Estate Buying EventsRetailers are seeking new ways to attract customers, increase traffic, and create revenue – Estate buying events are a popular solution.
CrimeAug 06, 2026
Lalique Museum to Remain Closed Following $5M HeistMuseum officials are looking to the public to help cover the “exceptional” costs involved in recovering from the July 5 smash-and-grab.
Weekly QuizAug 07, 2026
This Week’s QuizTest your jewelry news knowledge by answering these questions.
MajorsAug 06, 2026
Claire’s Revamps Piercing Services for Second Time in Three Years The overhaul includes enhanced employee safety training and trendy earring styles, including lab-grown diamond studs.
FinancialsAug 06, 2026
Brilliant Earth’s Q2 Sales Up 6%, Driven by High-Income ShoppersThe retailer said it had its biggest Mother’s Day ever, with strong demand for higher-priced jewelry.
Brought to you by
Wedding Band Trends 2026: Personalization Takes Center StageColored gemstones, artisan finishes, mixed metals, and meaningful details are shaping demand in bridal jewelry.
TrendsAug 06, 2026
New Book on Handcrafted American Objects Highlights Jewelry“Handwork: Handcrafted Objects that Made America” features historic and contemporary works, including a Diné squash blossom necklace.
MajorsAug 06, 2026
AJA East Coast Names Ani Khachian as First Female President-ElectThe Armenian Jewelers Association’s East Coast chapter has also elected its 2026–2027 board of directors.
MajorsAug 05, 2026
Private Equity Firm Wants to Buy 100+ JCPenney StoresOnyx Partners has submitted a second offer to buy the department stores after its first offer fell through last year.
IndependentsAug 05, 2026
Atlanta Jeweler Introduces $10K MartiniSolomon Brothers Jewelers has partnered with local cocktail bar Roaring Social on a new martini garnished with a tennis necklace.
IndependentsAug 05, 2026
Another Member of the Siegel Family Joins Hamilton Jewelers Benjamin Siegel, son of President and CEO Hank Siegel, started working for the family business this week.
MajorsAug 05, 2026
Bulgari Opens Store in San DiegoThe new space features a modern design that blends Bulgari’s Roman heritage with San Diego’s coastal spirit.
CrimeAug 04, 2026
Crew of Thieves Break Into Indiana Jeweler’s HomeFour men were charged in connection with the break-in and accused of stealing $365,000 in cash, jewelry, and designer goods.
MajorsAug 04, 2026
Pandora Hires Former Signet Board Member to Lead North American MarketAndré Branch has more than 25 years of experience with various brands, most recently serving as CEO of Ariana Grande’s cosmetics company.
MajorsAug 04, 2026
Sasha Primak Acquires GemlokNew York-based atelier Gemlok is best known for creating the innovative “bridge” setting that became popular in the bridal market.
CollectionsAug 04, 2026
Musician Carlos Santana Launches Jewelry BrandSantana Now's debut collection, “Unidad,” features symbolic motifs as well as pieces of wood from the Woodstock stage.
CrimeAug 03, 2026
Florida Man Gets 15 Years in Trio of Jewelry Store RobberiesThe 50-year-old man pleaded guilty earlier this year to robbing two jewelry stores and a pawn shop of more than $700,000 in merchandise.
WatchesAug 03, 2026
Citizen's New Spider-Man Watch Is a Collector’s DreamThe watch’s dial features an original design by Marvel comics illustrator Adam Kubert.
Lab-GrownAug 03, 2026
Chatham Releases First Men’s CollectionThe new collection of lab-grown diamond and colored gemstone jewelry provides a “fresh perspective” on the category, Chatham said.
TrendsAug 03, 2026
Amanda’s Style File: Spinel vs. Peridot While some August babies are team peridot, the month's time-honored birthstone, others are team spinel, the newer alternative.
TrendsJul 31, 2026
These Pieces of the Week Are Sweet Edina Kiss’ “Popsicle” pendant and Karina Choudhrie’s “Ice Cream” charm satisfy that summer craving for a sweet piece of jewelry.
MajorsJul 31, 2026
Macy’s Iconic Red Shopping Bag Sign Torn DownThe massive billboard has been in the same spot on the department store’s Herald Square flagship store for decades.
SourcingJul 31, 2026
Gemfields’ H1 Revenue Jumps 72%The miner’s ruby and emerald auctions brought in a combined $102.9 million.
SourcingJul 30, 2026
De Beers Sale in ‘Final, Most Challenging’ Phase, Anglo CEO SaysThe goal is for the De Beers sale to be finished by the second half of 2026, with the subsequent approvals process expected to take a year.
Policies & IssuesJul 30, 2026
JA Heads Back to Washington as New Wave of Tariffs Takes Effect David Bonaparte, along with Tim Haake and Ronnie VanderLinden, continue to lobby for tariff exemptions for diamonds, gemstones, and pearls.
