In email apparently sent from Christie’s to its clients this week, the auction house said that only identification data, and not financial or transaction data, was stolen during the cyber-attack earlier this month.
The email was posted to X by Belgian art collector Alain Servais, though Christie’s did not respond to a request for comment or confirm the email as authentic at the time of publication.
The attack, which took place on May 9, was characterized by Christie’s as a “technology security issue” before being claimed as a hack by the cyber-extortionists group RansomHub in a message on the dark web Sunday. The hack forced Christie’s to shut down its website just days before the marquee auction sales in New York, which many hoped would lend clarity to a more than usually opaque art market.
In the email posted by Servais, Christie’s described the hackers as “an unauthorized third party” and said that they accessed their IT network “for a limited period of time” and downloaded certain client data from Christie’s internal client verification system which houses information relating to client ID checks that required to retain for compliance reasons. The data included personal information from photographic identification documents like passports and drivers licenses but did not include photos, signatures, contact details, financial data, or transaction-related information, the email said.
Christie’s said further that it has taken steps to secure their systems, and have informed authorities. They have not yet found evidence of data misuse related to the attack.
As a result of the attack, Christie’s is offering clients one year of free identity theft protection and has reccomended vigilance against phishing and fraud. They also recommended that clients monitor their accounts for unusual activity, use strong passwords, and “be alert to the risk of phishing and any related fraud including any emails asking you to enter login credentials, provide financial information or give up any other personal data.”
Despite the attack and lack of a traditional website during the May auction week, Christie’s fared well bringing in $114.7 million for the Rosa de la Cruz and 21st Century sales and $413 million during its 20th Century evening sale.
