Full Breakdown
Uffizi Galleries Cyberattack: Incident Overview and Response
4/4/2026, 12:37:15 PM
Cyberattack Details and Immediate Response
The Uffizi Galleries in Florence confirmed that they were the target of a cyberattack on February 1, 2024. Reports from the Italian newspaper Corriere della Sera indicated that hackers infiltrated the museum's IT systems, allegedly extracting sensitive information such as access codes, internal maps, and the locations of CCTV cameras and alarms. Following the breach, a ransom demand was reportedly sent to museum director Simone Verde's personal phone. However, the Uffizi denied that any security systems were compromised, asserting that their internal security measures remained intact and inaccessible from external sources.
The cyberattack also affected the Uffizi's affiliated sites, including the Palazzo Pitti and the Boboli Gardens. In response to the incident, the Uffizi moved valuable items, including parts of the "Medici Treasure," to a vault at the Bank of Italy for safekeeping. While the museum acknowledged this transfer, it characterized it as part of planned renovation work rather than a direct consequence of the cyberattack.
Security Measures and Controversies
In light of the incident, the Uffizi emphasized that no passwords were stolen and that employee phones were not compromised. The museum stated that the hackers did not possess any maps of the security systems, as the locations of the cameras are visible to the public. The Uffizi also highlighted that it had upgraded its surveillance systems from analogue to digital in 2024, following police recommendations.
Despite reports of sealed doors and emergency exits at the Palazzo Pitti, the Uffizi attributed these actions to fire-safety compliance measures and the need to adapt the historic building's structure for modern use. The museum had not held fire safety certification for decades and had recently submitted a safety notice to the fire brigade.
Official Statements and Reactions
The Uffizi Galleries maintained that their situation was not comparable to the Louvre, which experienced a high-profile theft in 2023. They reiterated that their security systems were robust and that no data had been lost due to the cyberattack, as their photographic archive was fully backed up.
Criticism and Opposition
Critics have raised concerns regarding the Uffizi's handling of the incident, particularly regarding the sealing of doors and the transfer of valuable items. Some sources suggest that the museum's actions may have been more reactive than proactive, raising questions about its overall security preparedness.
What's Next
The Uffizi Galleries continue to operate normally, with ticketing and public areas largely unaffected by the cyberattack. However, the incident has prompted a reassessment of security protocols across major museums in Italy, as institutions strive to enhance their defenses against potential cyber threats.
