Class Action Lawsuit Filed Against Christie’s for Cyberattack Exposing Clients’ Personal Data



The aftermath of the cyberattack on Christie’s continues to escalate, with a class action lawsuit filed against the auction house over its failure to protect the personally identifiable information (PII) of over 500,000 current and former bidders. The complaint seeks damages and court orders related to data security measures. The lawsuit alleges that data thieves have already engaged in identity theft and fraud with the stolen information, including customers’ personal details from passports. Christie’s declined to comment on the lawsuit, and the law firm representing the plaintiff had not responded to requests for comment.

The breach, attributed to a network of hackers called RansomHub, has raised concerns about potential identity theft risks for Christie’s clients. Although the auction house confirmed the exposure of certain personal information, it stated that financial details and other sensitive information were not compromised. The lawsuit highlights the potential for hackers to combine stolen details with publicly available information to create comprehensive profiles on individuals, known as “fullz”, which are valuable on the dark web for committing identity theft.

Additionally, the complaint accuses Christie’s of inadequate communication with affected clients following the breach, alleging that the lack of specific details and follow-up leaves customers vulnerable to further harm. The lawsuit also raises concerns about the impact on data brokering market and the potential use of exposed data for targeted marketing without consent. The breach has reportedly caused anxiety and stress for the plaintiff and may lead to more clients joining the class action lawsuit in the future.



Source

Tagged: , , , , ,