Sotheby's finds its data on the block after cyberattack

"Auction house Sotheby's says it was breached on July 24, and those behind the intrusion stole an unspecified amount of data, including Social Security numbers and financial account information. The multinational broker of fine art and luxury items said it is not aware of who was behind the attack, but confirmed in a filing with the state's Attorney General's Office this week that two Maine residents were affected by the breach."

"We have administrative and technical safeguards in place that protect information through layered defenses, strict access controls, secure connections, and advanced threat protections. We regularly patch systems, test our internal incident response plans, back up critical services, vet our vendors, and train our workforce to ensure security is built into how we work every day. As part of our ongoing commitment to the privacy of information we will continue to review these safeguards and consider further enhancements to ensure the ongoing safety of information on our systems."

Sotheby's experienced a cyber intrusion on July 24 that resulted in theft of an unspecified volume of data, including Social Security numbers and financial account information. The company reported that it does not know who carried out the attack and confirmed two Maine residents were affected in a state Attorney General filing. Sotheby's stated that layered technical and administrative safeguards exist and that systems are regularly patched, incident plans tested, vendors vetted, and staff trained. The company is offering affected individuals 12 months of credit and identity monitoring through TransUnion. The scope and any extortion demands remain unclear. The incident follows a recent cyberattack on a rival auction house.

Read at Theregister