Auction giant Sotheby’s says data breach exposed customer information

Sotheby’s detected a cybersecurity incident on July 24, 2025, that resulted in the removal of sensitive information from its systems; initial reports indicated customer PII and financial data (including SSNs) were exposed, but the company later clarified the notifications concerned employees. The investigation took about two months to validate the data involved, the scope and number of affected individuals remain unclear, no ransomware group has claimed responsibility, and affected individuals were offered 12 months of identity protection/credit monitoring.