Christie's starts notifying clients of RansomHub data breach

Christie's disclosed a May 8–9, 2024 security breach in which a threat actor accessed and extracted customer files; the RansomHub extortion gang claimed responsibility, posted an entry on its leak site and later said it sold the stolen data. Christie's investigated the incident, notified affected individuals (reportedly up to 500,000 clients), offered 12 months of identity/fraud monitoring, involved law enforcement and external cybersecurity firms, and stated it has no evidence of misuse or financial data compromise at the time of notification.