.png)
Sotheby's Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Sotheby's data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Sotheby's
Sotheby's is a well-known auction house with a history dating back to 1744, when it was founded in London. Over the centuries, Sotheby's has grown into a global marketplace for fine art, luxury items and collectibles, with headquarters now in New York City and offices in more than 40 countries.
The company facilitates auctions, private sales, e-commerce and retail operations, connecting buyers and sellers of art, jewelry, watches, wine, real estate and other valuable items. Sotheby's is supported by a network of specialists covering 70 categories, making it a major player in the fine art and luxury market.
What happened?
In July 2025, Sotheby's discovered that sensitive data had been removed from its systems by a cybercriminal. A review was completed around Sept. 24, 2025, and determined the data breach compromised personal and financial information belonging to an unknown number of individuals.
A threat actor known as "m217" claimed responsibility for the breach, posting on the dark web about the hacked files as early as May 23, 2025. Sotheby's began notifying impacted clients by mail on Oct. 15, 2025.
Information Exposed
- Name
- Social Security number
- Financial account information
The cybersecurity incident was also disclose to the Maine and Massachusetts Attorney Generals' offices on Oct. 15, 2025.
Your Rights and Next Steps
If you received a notice from Sotheby's or suspect your information may have been involved, there are important steps you can take to protect yourself:
- Credit monitoring services: Enroll in the 12 free months of TransUnion Cyberscout credit monitoring services, offered by Sotheby's.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Lawyers are ready to help individuals affected by this breach understand their rights and pursue compensation if warranted.
You May Be Entitled to Compensation
If your personal information was compromised in the Sotheby's data breach, you may be eligible for compensation. Legal action may help you recover damages for any harm suffered, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
Complete the form below to join a potential lawsuit and protect your rights.
.svg)