In email apparently sent from Christie’s to its clients this week, the auction house said that only identification data, and not financial or transaction data, was stolen during the cyberattack earlier this month.
The email was posted to X by Belgian art collector Alain Servais. A Christie’s representative confirmed the authenticity of the email.
The May 9 attack was characterized by Christie’s as a “technology security issue” before being claimed as a hack by the cyber-extortionist group RansomHub in a message on the dark web this past Sunday. The hack forced Christie’s to shut down its website just days before the marquee auction sales in New York, which many hoped would lend clarity to a more than usually opaque art market.
Related Articles
In the email posted by Servais, Christie’s described the hackers as “an unauthorized third party” and said that they accessed their IT network “for a limited period of time” and downloaded certain client data from Christie’s internal client verification system that houses information relating to client ID checks they are required to retain for compliance reasons. The data included personal information from photographic identification documents like passports and drivers licenses; it did not include photos, signatures, contact details, financial data, or transaction-related information, the email said.
Christie’s said further that it has taken steps to secure their systems, and have informed authorities. They have not yet found evidence of data misuse related to the attack.
As a result of the attack, Christie’s is offering clients one year of free identity theft protection and has recommended vigilance against phishing and fraud. They also recommended that clients monitor their accounts for unusual activity, use strong passwords, and “be alert to the risk of phishing and any related fraud including any emails asking you to enter login credentials, provide financial information or give up any other personal data.”
Despite the attack and lack of a traditional website during the May auction week, Christie’s fared well, bringing in $114.7 million for the Rosa de la Cruz and 21st Century sales and $413 million during its 20th Century evening sale.