Sotheby’s Data Breach: What Happened, Who’s Affected, and How to Protect Your Rights
Luxury art shouldn’t come with an identity-theft price tag. If Sotheby’s just mailed you a breach notice, read on—then check whether you qualify for free help and possible cash compensation.
Check Your Claim in 2 Minutes →Quick Facts
- Who was hit? Sotheby’s, the 280-year-old luxury auction house.
- What was exposed? Personal information, financial-account details, and Social Security numbers.
- When did it happen? Breach discovered in July 2025; investigation wrapped in September 2025; notice letters mailed this month.
- What is Sotheby’s offering? Free TransUnion credit monitoring.
The Timeline, Straight from Sotheby’s Notice
According to the letter Sotheby’s is now mailing out:
- July 2025 — Discovery: Sotheby’s detected unauthorized activity and confirmed personal data was accessed.
- September 2025 — Investigation ends: Forensics teams finished reviewing what was taken and how.
- October 2025 — Notifications begin: Impacted customers started receiving physical letters alerting them to the breach.
If you received that letter, your information was inside the files removed by the hacker.
Why This Breach Matters
Unlike password leaks that you can fix with a reset, compromised Social Security numbers and bank-account details stick with you for life. Fraudsters can:
- Open credit lines in your name
- Drain linked financial accounts
- File fraudulent tax returns
- Resell your data on dark-web marketplaces
Your Legal Options
Lawyers are already investigating whether Sotheby’s used reasonable cybersecurity measures. If the company fell short, affected customers may have legal claims for:
- Reimbursement of out-of-pocket losses (e.g., bank fees, credit freezes, identity-theft services)
- Compensation for time spent monitoring accounts or fixing fraudulent charges
- Potential statutory damages allowed under state data-breach laws
Filing a claim costs you nothing up front. Most cases operate on a contingency basis—meaning fees are paid only if compensation is recovered.
Next Steps If You Got the Letter
- Activate credit monitoring: Use the code in your notice to enroll with TransUnion.
- Place fraud alerts: Contact the major credit bureaus to add a free, one-year alert on your reports.
- Monitor accounts: Check bank and credit-card statements weekly for at least the next 12 months.
- Document everything: Save the Sotheby’s letter and any time or money you spend responding.
- Explore a claim: Use our quick online tool to see if you qualify for additional compensation.
Watch the quick explainer
Attorney Rachel breaks it down in under a minute: