Christie’s said an unauthorised actor accessed certain files between 8 and 9 May 2024 and copied some of them. Reported exposed fields include names and identity document numbers. The auction house later agreed a $990,000 class action settlement.
Anti-Money-Laundering Rules Created The Exposure
An auction house holds passport and identity document numbers because it is required to verify who is bidding. The obligation is sound and the consequence is a concentrated store of exactly the documents that cannot be reissued cheaply.
The same structure recurs across the file set: a compliance requirement to collect, no matching requirement to dispose, and a store that outlives the transaction that justified it.
A Two-Day Window Is A Short One
Access spanned 8 to 9 May. Against dwell times measured in months elsewhere in this database, that is fast detection or a fast operation, and either way it bounds what could be taken.
It does not bound the consequence. Identity document numbers copied in two days remain valid for years, and the settlement divides to a small sum per person.
Compiled from the company’s notifications, public reporting and settlement filings, listed below. No affected-client count was published. Corrections: corrections@forensicpost.com.
- $990K Christie’s data breach class action settlementTop Class Actions