Full Breakdown
Cybersecurity Challenges in the Art Market
2/27/2026, 1:45:19 AM
The Growing Threat of Cyber Attacks
The art market is increasingly vulnerable to cyber threats, with auction houses, galleries, and individual dealers facing significant risks from hackers seeking sensitive client data. Instances of ransomware attacks, data breaches, and denial-of-service attacks have become common, prompting many in the industry to reassess their cybersecurity measures. For example, Heritage Auctions reported frequent cyber attacks, with technology principal Sam Spiegel noting that they are targeted "weekly if not daily." In 2019, a ransomware attack temporarily disabled their website, but robust backup systems prevented data loss and ransom payments.
Vulnerabilities in the Art Sector
Galleries often lack dedicated IT personnel, making them particularly susceptible to cyber threats. James Carroll, founder of Hacket Cyber, highlighted that gallery staff typically prefer discussing art over cybersecurity, which can lead to inadequate security measures. In 2020, LiveAuctioneers experienced a data breach affecting 3.4 million users, exposing personal information. Cristin Tierney, a New York City gallery owner, stated that her gallery does not store sensitive financial information, suggesting that some galleries are taking precautions, albeit inconsistently.
Industry Responses and Best Practices
To combat these threats, many auction houses are outsourcing data storage to specialized firms. Joshua Eldred, president of Eldred’s auction house, emphasized the importance of using third-party payment platforms like Authorize.net to minimize the risk of storing sensitive information internally. Auction houses such as Sotheby’s and Phillips have publicly committed to enhancing their cybersecurity protocols, with Sotheby’s stating they regularly update security measures to protect client data.
The Art Dealers Association of America (ADAA) plays a crucial role in educating galleries about cybersecurity risks. Executive Director Kinsey Robb noted that as the art trade becomes more digital, cybersecurity has shifted from a secondary concern to a core operational issue. The ADAA circulates alerts on scams and fraud patterns, helping galleries stay informed about evolving risks.
Criticism and Concerns
Despite these efforts, there remains a reluctance within the industry to discuss cybersecurity openly. Some auction house executives fear that claiming they have never been hacked could attract more attacks. A spokesperson for one auction house, speaking anonymously, expressed this concern, highlighting the delicate balance between transparency and vulnerability.
Verbatim Quotes
- “We get attacked very regularly—weekly if not daily,” — Sam Spiegel, Technology Principal at Heritage Auctions
- “We have no sensitive information on our system.” — Joshua Eldred, President of Eldred’s Auction House
- “Kinsey Robb, executive director of the association, stated that “as the art trade becomes increasingly digital, cybersecurity has shifted from a back-office concern to a core operational issue.” — Kinsey Robb, Executive Director of the Art Dealers Association of America
- “A.I. is definitely the next wave of cyber attacks,” — Sam Spiegel, Technology Principal at Heritage Auctions
Conclusion
The art market's transition to digital platforms has heightened its exposure to cyber threats, necessitating a proactive approach to cybersecurity. While some auction houses and galleries are implementing measures to protect client data, the overall industry must continue to evolve and adapt to the growing sophistication of cyber attacks.
