Graff paid £6m ransom fee to Russian hackers behind celebrity cyber attack

Graff paid £6m ransom fee to Russian hackers behind celebrity cyber attack
By Sam Lewis - 8th July 2022 0

It has been revealed that high-end British jeweller Graff paid out a ransom fee topping £6 million in a well-publicised cyber attack last year.

It emerged in November 2021 that Graff had been the target of Russian hackers who had gained possession of data pertaining to many of Graff’s high-profile customers.

The list of celebrities whose data had been stolen in the cyber attack reportedly included the likes of David Beckham, Oprah Winfrey, Tom Hanks and Donald Trump.

Advertisement


Now it has been reported by Bloomberg that the jeweller paid $7.5 million (£6.3 million) by way of a ransom fee so that the data of its customers not be released.

Graff is also suing its insurance agency over the latter’s refusal to cover the ransom fee.

The jeweller stated at the time that most clients had nothing to worry about as the data stolen only included their names and addresses – data already in the public domain.

The Mail on Sunday, however, reported at the time that client lists, invoices, receipts and credit notes had been taken, all of which could potentially prove damaging to those involved.

It was said that cybercriminal group Conti was selling around 69,000 documents on the dark web after the attack.

Sky News quoted a Graff spokesperson who said: “Regrettably we, in common with a number of other businesses, have recently been the target of a sophisticated – though limited – cyber attack by professional and determined criminals.

“We were alerted to their intrusive activity by our security systems, allowing us to react swiftly and shut down our network.

“We notified, and have been working with, the relevant law enforcement agencies and the ICO.

“We have informed those individuals whose personal data was affected and have advised them on the appropriate steps to take.”

On the topic of its legal case against its insurer, a Graff spokesperson was quoted by Mint as saying: “The criminals threatened targeted publication of our customers private purchases.

“We were determined to take all possible steps to protect their interests and so negotiated a payment which successfully neutralised that threat.

“We are extremely frustrated and disappointed by [insurer] Travelers’ attempt to avoid settlement of this insured risk.

“They have left us with no option but to bring these recovery proceedings at the High Court.”