Auction house Sotheby's reports data breach exposing employee data and social security numbers
Learn More
International auction house Sotheby's is reporting a data breach incident that resulted in the exposure of sensitive employee information, including financial details and Social Security numbers.
Sotheby's became aware on July 24, 2025, that certain company data appeared to have been removed from their environment by an unknown actor. The investigation with leading data protection experts and law enforcement authorities took approximately two months to complete before the company could begin notifying affected individuals.
Exposed data includes:
- Full names
- Social Security numbers (SSNs)
- Financial account information
The attack vector and number of affected individuals is not disclosed. No ransomware groups have claimed responsibility for the attack as of the time of reporting.
The total number of impacted individuals has not been publicly disclosed. Sotheby's confirmed that the incident impacted employees, not customers or clients of the auction house.
Value of the Incident:
No monetary value, ransom demand, or payment information has been disclosed. The incident does not appear to follow the typical ransomware model where threat actors encrypt systems and demand payment, as no criminal groups have publicly claimed the attack or posted stolen data on leak sites.
Sotheby's is providing affected employees with 12 months of free identity protection and credit monitoring services.
