In an alarming incident that has raised concerns about data security, Sotheby’s, the renowned auction house, experienced a significant data breach that has affected a substantial number of individuals. Such breaches can lead to sensitive personal information being exposed, making it essential for affected parties to understand their rights and options moving forward.

About Sotheby’s

Sotheby’s is a prestigious auction house located at 1334 York Avenue, New York, NY 10021. Known for its high-profile auctions and extensive art collections, Sotheby’s operates in the commercial sector, providing a platform for buying and selling unique and valuable items. The breach at this organization highlights the vulnerabilities even established entities face in today’s digital landscape.

What Happened

The breach occurred on July 24, 2025, when an external system was compromised due to hacking. This incident was officially discovered on September 24, 2025, prompting immediate action to assess the scope of the breach. Written notifications were sent to affected individuals on October 15, 2025, informing them of the potential risks associated with the breach.

While the total number of individuals affected is substantial, it is noteworthy that a small number of residents from Maine were among those impacted. Following the breach, Sotheby’s has offered identity theft protection services through TransUnion, which includes 12 months of credit monitoring and identity restoration services to help mitigate any potential harm.

Next Steps

If you believe you may have been affected by the Sotheby’s data breach, it is crucial to take action immediately. We at Srourian Law Firm (SLFLA) are here to help you navigate the situation and explore your legal options. Our team of experts can provide guidance on protecting your identity and addressing any concerns you may have regarding the breach. Contact us today to discuss your options and ensure your rights are protected.