Digital Editions
Newsletters
Subscribe
Digital Editions
Newsletters
Art market
Museums & heritage
Exhibitions
Books
Podcasts
Columns
Technology
Adventures with Van Gogh
Art market
Museums & heritage
Exhibitions
Books
Podcasts
Columns
Technology
Adventures with Van Gogh
Christie's
news

Hackers claim responsibility for Christie's cyberattack and threaten to release client data

The group RansomHub say they are behind the attack that took down the auction house's website earlier this month

Kabir Jhala
28 May 2024
Share
Christie's faced a cybersecurity attack earlier this month as it held its marquee spring auction season

Courtesy of Christie's

Christie's faced a cybersecurity attack earlier this month as it held its marquee spring auction season

Courtesy of Christie's

The hacker group RansomHub has claimed responsibility for the cyberattack that took down Christie’s website earlier this month. It said it is now in possession of “sensitive personal information” on the auction house’s clients, which it is threatening to release.

In a post on the dark web on Monday—a screenshot of which was shared on X by Brett Callow, a threat analyst with the cybersecurity firm Emsisoft—RansomHub said it had gained access to data on “at least 500,000” Christie’s customers from “all over the world”, including full names, document numbers, nationalities and birth dates.

“We attempted to come to a reasonable resolution with [Christie’s] but they ceased communication midway through,” RansomHub’s post continues. Referring to the General Protection Data Regulation (GDPR) passed by the EU in 2016, the group said: “It is clear that if this information is posted they will incur heavy fines from GDPR as well as ruining their reputation with their clients and don’t care about their privacy.”

Speaking to the New York Times, Callow said: “We know that Christie’s had an incident and a known ransomware operation has now claimed responsibility. There is no real reason to doubt the claims.” According to the newspaper, the group said it would release the data, posting a countdown timer that would reach zero by the end of May.

In a statement, a Christie’s spokesperson said: “Our investigations determined there was unauthorised access by a third party to parts of Christie’s network,”, adding that the hacker group gained “some limited amount of personal data” of certain clients, but that it had no evidence of “financial or transactional records” being compromised. "Christie’s is currently notifying privacy regulators, government agencies as well as in the process of communicating shortly with affected clients."

Christie’s cyberattack brought down its website on 9 May, days before its marquee spring auction season. The auction house described the incident as a “technology security issue”. It continued with almost all of its live sales without a functioning website, and netted around $530m (with fees) from its evening sales of 20th and 21st century art, and the collection of the late Rosa de la Cruz.

Christie'sArt marketAuction housesCrime Cybersecurity
Share
Subscribe to The Art Newspaper’s digital newsletter for your daily digest of essential news, views and analysis from the international art world delivered directly to your inbox.
Newsletter sign-up
Information
About
Contact
Cookie policy
Data protection
Privacy policy
Frequently Asked Questions
Subscription T&Cs
Terms and conditions
Advertise
Sister Papers
Sponsorship policy
Follow us
Instagram
Bluesky
LinkedIn
Facebook
TikTok
YouTube
© The Art Newspaper

Related content

Art Basel 2024feature
11 June 2024

After the Christie’s cyberattack, who could be next?

A hack that caused huge disruption to the auction house is a wake-up call to galleries and art advisories of all sizes

Daniel Grant
Art marketnews
4 June 2024

Christie's hit with class action lawsuit over exposure of clients' personal data in cyberattack

The complaint, filed on 3 June by a Dallas-based customer, is the latest problem for the auction house following a major cyberattack

Tim Schneider
Art marketnews
18 December 2020

Tech-savvy Sotheby's $5bn global sales beat Christie's $4.4bn in 2020

The two rivals have made record online and private sales as pandemic overturns traditional live auction format

Kabir Jhala. with additional reporting by Anna Brady
Art marketnews
15 January 2025

Guillaume Cerutti steps down as Christie's chief executive—but will stay within Pinault's orbit

He will be replaced by the president of Christie's America, Bonnie Brennan

Kabir Jhala