Christie's confirms cyber-attack was an 'unauthorised access by a third party.'
In a LinkedIn post, Guillaume Cerutti, chief executive officer at Christie's confirmed that there had been a cybersecurity incident, and its subsequent investigation determined there was unauthorised access by a third party to parts of Christie's network.
Also some data was taken, including a limited amount of personal data relating to some clients, but he said there is no evidence of any financial or transactional data - related to clients or to Christie’s - being taken or copied.
A
New York Times claimed that a group called ‘RansomHub’ had been responsible for the attack, and that Christie’s had refused to pay the ransom demand.
Written by
Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.