Hacking group claims it stole client data from Christie’s

Hacking group claims it stole client data from Christie’s
The sale room at Christie’s in New York during its 21st Century Evening auction. Bloomberg

After a cyberattack on Christie’s auction house earlier this month, a hacker group called RansomHub claimed responsibility. 

In a post on the dark web on Monday, RansomHub said that it had gained access to the personal information of the firm’s wealthy clients and published what it claimed was a “sample” with a few names, nationalities and birth dates. The group posted the information along with a countdown clock, suggesting they would publish the entire trove in early June.

The group’s claims and the authenticity of the data it published could not be immediately verified. But a Christie’s spokesperson acknowledged that some client information was taken. “Our investigations determined there was unauthorised access by a third party to parts of Christie’s network,” wrote the spokesperson in a statement on Monday. “They also determined that the group behind the incident took some limited amount of personal data relating to some of our clients. There is no evidence that any financial or transactional records were compromised.”

The attack, which led to the auction house taking down its site on 9 May, came days before Christie’s began its all-important 20th and 21st century May auctions in New York. This briefly threw the success of the auctions in doubt. But Christie’s, which at the time called the attack a “technology security incident,” was able to post its auction catalogs on a separate site, and gave collectors who registered a link to bid online. All told, the main Christie’s website was offline for approximately 10 days. Christie’s is held by the billionaire Pinault family’s Artemis SA. Last year, the auction house reported global sales of approximately $6.2-billion.

Brett Callow, a threat researcher at the cybersecurity firm Emsisoft, said it appears “quite likely” that RansomHub was involved in the breach of Christie’s but it’s not clear whether the group made off with as much data as they claim. “The biggest concern in this case may be the possibility of the location of very expensive artworks being posted online,” Callow told Bloomberg in an email..


Comments - Please in order to comment.

Please peer review 3 community comments before your comment can be posted


This article is free to read.

Sign up for free or sign in to continue reading.

Unlike our competitors, we don’t force you to pay to read the news but we do need your email address to make your experience better.

Nearly there! Create a password to finish signing up with us:

Please enter your password or get a sign in link if you’ve forgotten

Open Sesame! Thanks for signing up.