✨ The Containment Era is here. Secure AI workloads before they breach. →The Containment Era is here. →The Containment Era is here. →Explore ✨
Fine Art
Breach intelligence, attack campaigns, and threat reports targeting the Fine Art sector.
Explore Other Sectors
Fine Art Threat Reports
Sotheby’s 2025 Data Breach: Employee Financial Data Compromised
In July 2025, Sotheby's, the renowned international auction house, identified a significant cybersecurity breach in which an unknown threat actor exfiltrated sensitive employee information, including full names, Social Security numbers, and financial account details. The breach was discovered on July 24, 2025, and an internal investigation with data protection experts and law enforcement extended over two months to confirm the nature and scope of compromised data. Sotheby’s responded by notifying impacted employees and offering a year of free identity protection and credit monitoring services. No ransomware group claimed responsibility, and the number of affected individuals remains undisclosed. This incident underscores ongoing risks facing financial and high-value service sectors, especially from sophisticated attacks targeting personnel data for monetization and fraud. Organizations with sensitive employee or client financial data must act promptly as regulatory scrutiny tightens and attacks on high-net-worth entities continue to escalate.
5 months ago
Kill Chain
Sotheby's 2025 Data Breach: When Sensitive Customer Information Goes Public
In July 2025, Sotheby's, a leading global auction house, suffered a significant data breach in which threat actors exfiltrated sensitive customer data. Discovered on July 24, the breach resulted in the exposure of customers' full names, Social Security numbers, and financial account information. An internal investigation spanned two months, determining the scale and nature of the data affected and the impacted individuals, which included Maine and Rhode Island residents. While the number of victims remains undisclosed, Sotheby's began notifying those affected and offered complimentary identity protection and credit monitoring. No ransomware group has publicly claimed responsibility, and the attack’s vector remains unknown, but similar institutions have faced ransomware- and data-theft-related intrusions in recent years. This incident underscores the rising frequency and impact of data breaches targeting well-known, high-value companies, particularly those handling sensitive customer and financial information. It highlights pressing concerns around regulatory compliance, the need for comprehensive incident detection and response, and growing regulatory scrutiny of data protection practices in sectors beyond traditional financial services.
5 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports