Christie's confirms RansomHub crooks stole data on 45K clients

Christie's disclosed a cybersecurity incident discovered on May 9, 2024 in which an unauthorized actor accessed systems and copied files; state filings indicate 45,798 affected individuals with names and ID document numbers exposed, while the ransomware/extortion group RansomHub claimed more extensive PII and attempted to publicly leak or 'auction' the data. Christie's engaged external investigators and law enforcement, offered 12 months of credit monitoring, did not pay the ransom, and completed its internal review by May 30, 2024.