Auction giant Sotheby’s says data breach exposed financial information

Sotheby’s disclosed a cybersecurity incident detected on July 24, 2025, where unauthorized actors exfiltrated sensitive data from its environment; the exposed information reportedly included full names, Social Security numbers, and financial account details. The company investigated for two months, is notifying impacted individuals and offering identity protection, and later clarified the breach affected employees rather than customers; the overall scope and number of victims remain unknown and no ransomware group has claimed responsibility.