Where does the Sotheby's case file come from?

Every entry is taken from the breach report Sotheby's lodged with the New Hampshire Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Sotheby's Data Breach

This file collects the dated facts on record for the Sotheby's incident. The state report is dated October 15, 2025.

Timeline

October 15, 2025Report filed in New HampshireDate the notice was lodged with the New Hampshire Attorney General.

Case facts

Filing state: New Hampshire
Date reported: October 15, 2025
Receiving office: New Hampshire Attorney General

Case notes

Sotheby's, the international auction house and luxury marketplace, officially reported a data security incident to the New Hampshire Attorney General's office on October 15, 2025. The filing indicates that unauthorized access to the company's internal systems occurred, potentially exposing personal information maintained by the firm.

Sotheby's collects and stores sensitive personal information as part of its operations, facilitating high-value transactions such as fine art and jewelry sales. This data often includes details necessary for identification, financial processing, and client communication.

Individuals who have received a data breach notification letter directly from Sotheby's should understand that their personal information was likely among the files accessed by the unauthorized party. The company is currently investigating the full scope of the breach.

It is important to carefully review any official communication received from Sotheby's. These letters typically provide specific details about the incident and any identity protection services or other remedies being offered.

As a general precaution, individuals may consider monitoring their accounts and reviewing financial statements and credit reports for any suspicious activity. Remaining vigilant is a key step in protecting against potential misuse of personal information.

Questions about this case file

Where does the Sotheby's case file come from?: Every entry is taken from the breach report Sotheby's lodged with the New Hampshire Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

New Hampshire data breaches

Timeline

Case facts

Case notes

Questions about this case file

More New Hampshire case files