Sotheby’s International Investigates Cyber Security Data Breach
News Context
At a glance
- “We recognise the trust our clients place in our brand and regret any concern this incident may cause.
Scope of Accessed Data and Platform Details
Data that might have been accessed in the security incident includes names, addresses, emails, and phone numbers, according to company statements covered by 1News. The third-party platform functions specifically to hold contact information for marketing purposes. Sotheby’s confirmed that no email exchanges, legal documentation, or other substantive materials relating to properties were compromised. The real estate firm emphasized that the software platform is not utilized to store information connected to customer financial transactions. However, in communication sent directly to clients, the company noted that information stored inside open-text notes field could occasionally be deemed sensitive. Sotheby’s indicated it would contact any clients directly affected by that specific exposure.Contradicting Contact Volume Claims
Reporting from outlets including RNZ and The Post highlights a significant discrepancy regarding the scale of the breach. The person who accessed the data claimed to have obtained 1.6 million contacts, a figure that Sotheby’s has firmly refuted. The real estate company stated that its database does not hold 1.6 million contacts. According to independent forensic investigators examining the third-party platform, the large figure cited by the unauthorized actor stemmed entirely from duplicate entries within the system.Company Response and Ongoing Investigation
New Zealand managing director Mark Harris addressed the incident in public statements reported across multiple outlets.“We recognise the trust our clients place in our brand and regret any concern this incident may cause. Since becoming aware of the incident, our focus has been on containing the issue, understanding exactly what occurred, and working with independent cyber security specialists to protect client information. We remain committed to transparency and will continue to provide updates as deemed necessary,”
